last executing test programs:

10m5.806266704s ago: executing program 3 (id=4):
socket$nl_generic(0x10, 0x3, 0x10)
landlock_create_ruleset(&(0x7f0000000500)={0x21c1, 0x3, 0x3}, 0x18, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0x24, 0x0, 0x0)
syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
fgetxattr(r4, &(0x7f0000000180)=@known='trusted.overlay.impure\x00', &(0x7f0000000200)=""/112, 0x70)
r5 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080)
ioctl$LOOP_SET_FD(r5, 0x4c00, r4)
ioctl$LOOP_SET_FD(r5, 0x4c00, r5)
dup2(r4, r1)
r6 = socket$inet6(0xa, 0x80002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
write$dsp(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000100)=0xfffffff7)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r7, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8)

10m5.14601173s ago: executing program 3 (id=5):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000002c0), 0x0)
sendmsg$inet6(r0, 0x0, 0x4048043)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
openat$drirender128(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x2010, r1, 0xcc9ba000)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
mkdirat(r4, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000100)='./bus\x00', 0xe8)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
mkdirat(r5, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x50)
r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
renameat2(r6, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r6, &(0x7f00000002c0)='./file0\x00', 0x2)

10m2.932584431s ago: executing program 3 (id=12):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000002c0), 0x0)
sendmsg$inet6(r0, 0x0, 0x4048043)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$drirender128(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x2010, r1, 0xcc9ba000)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
mkdirat(r4, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000100)='./bus\x00', 0xe8)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
mkdirat(r5, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x50)
r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
renameat2(r6, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r6, &(0x7f00000002c0)='./file0\x00', 0x2)

10m2.377066637s ago: executing program 32 (id=12):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000002c0), 0x0)
sendmsg$inet6(r0, 0x0, 0x4048043)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$drirender128(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x2010, r1, 0xcc9ba000)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
mkdirat(r4, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000100)='./bus\x00', 0xe8)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
mkdirat(r5, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x50)
r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
renameat2(r6, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r6, &(0x7f00000002c0)='./file0\x00', 0x2)

5m14.298389053s ago: executing program 1 (id=1775):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x3)
sendmmsg(0xffffffffffffffff, &(0x7f0000007180)=[{{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000340)="3d00020000", 0x5}], 0x1}}], 0x1, 0x10014)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x5}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x6a, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2, 0x7f}]}}}}}}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x18, 0x6, 0x1)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x1f, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, r3, 0x0, 0x79002}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, 0xc, r3, 0x39}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x44010}, 0x80)

5m14.214093627s ago: executing program 1 (id=1776):
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$pppl2tp(0x18, 0x1, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
shutdown(r2, 0x0) (async)
shutdown(r2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[], 0xc8}}, 0x0) (async)
sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[], 0xc8}}, 0x0)
recvmmsg(r2, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x12002000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYRES64=r3, @ANYRES16=r1, @ANYBLOB="0000fcdbdf250500000008003a000008000005002d000100000008003a0001080000080034000180000005002d000100000005002e000000000405003300018000000500290000000000", @ANYBLOB=' \x00\x00\x00\x00\x00'], 0x54}, 0x1, 0x0, 0x0, 0x480c}, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="3a0000000000000000000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 0x10, 0x7}, 0xffffff96)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r7}, 0x17)
openat$ocfs2_control(0xffffff9c, &(0x7f00000001c0), 0x8000, 0x0) (async)
r8 = openat$ocfs2_control(0xffffff9c, &(0x7f00000001c0), 0x8000, 0x0)
close(r8)
ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x27)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4c23, 0x0, @private1}], 0x1c)
sendmmsg$inet6(r5, &(0x7f0000000380), 0x0, 0x3404c8d4)
dup(0xffffffffffffffff) (async)
dup(0xffffffffffffffff)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000000)={0x0, 0x0, 0xd, 0xfffffffffffff9e4})
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000180), 0x4)
r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r9)

5m12.314768281s ago: executing program 1 (id=1786):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newtaction={0x180, 0x30, 0x2, 0x1, 0x0, {}, [{0x16c, 0x1, [@m_skbmod={0xa4, 0x1e, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x2, 0x2, 0x5, 0x5, 0x1000}, 0x2}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="d144e95fc7c2"}, @TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}]}, {0x1e, 0x6, "72acbcad2cd177ce323f3df1732d652d054f29f82480a3735f12"}, {0xc}, {0xc, 0x8, {0x0, 0x5}}}}, @m_ife={0xc4, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x7e, 0x6, "4fc514ebd8940af1fa6b45434ce8607257a650b42a579ce71239e2888884a9e772dab772efde6d34b070eceeab621faf93de84ba6a0f2605a0e02f2c685cb8b5f97eeaa45e0ba83401c0018bfe8a64f707601fe9b0163be63faa7d8a19919ec3ae40b177734e0c9d97c894212792092c325ba6471494ecd96fd1"}, {0xc}, {0xc}}}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x4008881}, 0x0)
r0 = openat$dlm_plock(0xffffff9c, &(0x7f0000000180), 0x8a301, 0x0)
ioctl$TCFLSH(r0, 0x540b, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
keyctl$dh_compute(0x17, &(0x7f0000000400), 0x0, 0xffffffffffffffa2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000640), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0cc5605, &(0x7f0000000680)={0x2, @pix_mp={0x101, 0x0, 0x38416761, 0x2, 0x6, [{0x5, 0x6}, {0x6, 0x7}, {0x6, 0xffffffff}, {0x9, 0x6}, {0xe6, 0xd}, {0x400007f, 0x80000}, {0x6, 0x17}, {0x2000, 0xfffffff3}], 0xfa, 0x4, 0x8, 0x2}})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15)
writev(r6, &(0x7f00000001c0)=[{&(0x7f0000000640)="ce", 0x1}], 0x1)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)

5m11.195718671s ago: executing program 1 (id=1796):
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x1f, 0xffffc040, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0)
dup3(r5, r3, 0x0)
r6 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=<r7=>0x0, &(0x7f0000000280)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x80000100, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40)
mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1f, 0x12, r0, 0x100000000)

5m10.947050987s ago: executing program 1 (id=1799):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000480)={0x24, @long={0x3, 0x1, {0x100}}}, 0x14, &(0x7f0000000500)={&(0x7f0000000740)="2f5646e4d77c6bdf37bf17165ef5e8e403840b5545766ca797ddd777292f044ae434346173e887577509a403477514c85f517711953afc7e6bc41b9d021ea30ec12b124c967df46681addc0ef4604929a33b97335d29dede157b9512638b4eddb34050a874922433a84673599fa58d1f9b27b4eedf66d533a9177b7148a316bc1a8b1b89d32e596085c971b426fbb6ac40589b", 0x93}, 0x1, 0x0, 0x0, 0xd1}, 0x4008000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3)
ioctl$sock_TIOCINQ(r1, 0x541b, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000280)={0x1, 0x7, {<r5=>0x0}, {0xee00}, 0x3})
ptrace$cont(0x9, r5, 0x1, 0x80000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='contention_begin\x00', r4, 0x0, 0x5}, 0x18)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fcdbdf25240000001800dd2fce0b020064756d6d793000000000000000000000bc39c196e2f84a188cacb70a658654d19def76d42e8f9b5bd3d1ab8967ac4238e36799b1a697b406165b9cf7eb834bdae81c8845d3fb6a491ac801cd8f95212a94eeb5eefcaeff774abe5c14cf801e0fd54411f277efc369f15795367c939a390467a81874f38ece6bbc4ae16c56a72443dcd20d511babe73a54103454a62088256941646b59b8efee94c7c0245aa6131cb27fc1329fb0f51aa07f41b9d9546a71b17e5b2ba1f90e7bae920ce5338c6d740c126be0da82d9362ff637085624bb91d67d507330a961d41a7af20b357c7e"], 0x2c}}, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
r6 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x1a4)
mknodat$loop(r6, &(0x7f00000002c0)='./file1\x00', 0x6000, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
r7 = fsopen(&(0x7f0000000000)='qnx6\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000300)='source', &(0x7f00000000c0)='%(,:', 0x0)
linkat(r6, &(0x7f0000000100)='./file1\x00', r6, &(0x7f0000000240)='./file0\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2)

5m10.703918533s ago: executing program 1 (id=1800):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a3000"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'xfrm0\x00', &(0x7f0000000600)=@ethtool_test={0x1a, 0xffffffff, 0x1}})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000600a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040)

5m10.663065068s ago: executing program 33 (id=1800):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a3000"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'xfrm0\x00', &(0x7f0000000600)=@ethtool_test={0x1a, 0xffffffff, 0x1}})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000600a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040)

3m23.452498493s ago: executing program 5 (id=2381):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usbip_server_init(0x6)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4})
socket$netlink(0x10, 0x3, 0x15)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r5, 0x0, 0x1}, 0x18)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000002000014c763bdc0485b3629132ef95e700000000000000000002030000000000"], 0x24}}, 0x48850)

3m21.958097673s ago: executing program 5 (id=2386):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x7, &(0x7f0000000000)=0x1)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000000040))
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xf, 0x1, &(0x7f0000000080))
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x5, &(0x7f00000000c0))
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000100)={0x30, 0x4, 0x7, 0x4, 0x9})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xf2, 0xa62, &(0x7f0000000140))
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x47, &(0x7f0000000180)=0x1)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x9, &(0x7f00000001c0)=0x1)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffff4, 0x9, &(0x7f0000000200))
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x9, &(0x7f0000000240))
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x1, &(0x7f0000000280)=0x1)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x2, &(0x7f00000002c0))
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x6, &(0x7f0000000300)=0x1)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x5, &(0x7f0000000340))
flistxattr(r0, &(0x7f0000000380)=""/142, 0x8e)
r1 = openat$procfs(0xffffff9c, &(0x7f0000000440)='/proc/partitions\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x78, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000540)={@ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/168, 0xa8, 0x2, 0xb}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1000, 0x1}}, &(0x7f00000005c0)={0x0, 0x28, 0x40}}}, @enter_looper, @request_death={0x400c630e, 0x2}, @acquire_done={0x40106309, 0x1}, @dead_binder_done], 0xe3, 0x0, &(0x7f0000000680)="513e908e5d26e7a2d8f1daaf0c5a237688c2064d02c8aa5de264d4ef0baca10926a3b9464804341d4064a1dba34529c93238f7adcae272bad6efa017994e91ed78bf55553a04ca838cba328ea21ec5b558f9353da1e9a87c699e1e5dcd729ff8365a4341bc9876cc980d132c23f4831183734edb514e0ce176049a6d6805692945656699dfff9481632830e7184cb66a1a5a0202c515a715892b14047cb9ec93a2c64b3d6c57b3259e4ec434d357011b87089c2d814a9cbc9ec42afa6084b8f0f5a3e7801d28b4ef20b8c1e5d340108d0faaddda1d00d36364f3709aeedc3565838ccc"})
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f00000007c0)=0x7)
epoll_pwait(r1, &(0x7f0000000800)=[{}, {}], 0x2, 0x5, &(0x7f0000000840)={[0x4, 0x2]}, 0x8)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0xff, &(0x7f0000000880))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1)
sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r3, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x81, 0x68}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x810)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x80, &(0x7f0000000a00))
r4 = shmget(0x3, 0x2000, 0x20, &(0x7f0000ffb000/0x2000)=nil)
shmctl$SHM_UNLOCK(r4, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r1, <r5=>0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)=r1}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x11, &(0x7f0000000b00)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @call={0x85, 0x0, 0x0, 0x8e}, @ldst={0x3, 0x1, 0x3, 0x9, 0x9, 0x40, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}], &(0x7f0000000bc0)='syzkaller\x00', 0x200, 0xec, &(0x7f0000000c00)=""/236, 0x40f00, 0x8, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000d00)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000d40)={0x4, 0x2, 0x6}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000d80)=[r1, r1, r1], &(0x7f0000000dc0)=[{0x2, 0x5, 0x3, 0x8}, {0x3, 0x2, 0x4, 0x2}, {0x0, 0x1, 0xb, 0x4}, {0x0, 0x2, 0x4, 0x5}, {0x1, 0x1, 0xa, 0x1}, {0x2, 0x1, 0x7, 0x6}, {0x3, 0x3, 0x6, 0xa}, {0x1, 0x1, 0x4, 0x3}, {0x0, 0x5, 0x10, 0x2}, {0x1, 0x1, 0x2, 0x4}], 0x10, 0x5}, 0x94)

3m21.351024117s ago: executing program 5 (id=2389):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d214"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000001100000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0)

3m21.143905071s ago: executing program 5 (id=2390):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x70, @loopback, 0x400}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28)
write$binfmt_script(r0, &(0x7f0000000780)={'#! ', './file0'}, 0xb)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r1, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
setgroups(0x0, 0x0)
setregid(0x0, r2)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x64000080)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f0000000240)=0x1, 0x8)
r7 = openat$ocfs2_control(0xffffff9c, &(0x7f00000001c0), 0x8000, 0x0)
close(r7)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000180)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x24})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc01c64b9, &(0x7f0000000280)={&(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x3, 0x0, 0xdededede})
msgget$private(0x0, 0x0)
close_range(r6, 0xffffffffffffffff, 0x0)

3m20.283881583s ago: executing program 5 (id=2397):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d214"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000001200000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0)

3m20.091335007s ago: executing program 5 (id=2398):
socket$inet_udplite(0x2, 0x2, 0x88)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}]}, 0x40}}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = epoll_create1(0x80000)
r5 = fcntl$dupfd(r3, 0x406, r4)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)={0x10000014})
r6 = getpid()
r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r5, &(0x7f0000000100)={r4, r5})
socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x20, 0x12, 0x1}, 0x20}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000001c0), 0xc7)

3m20.047339365s ago: executing program 34 (id=2398):
socket$inet_udplite(0x2, 0x2, 0x88)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}]}, 0x40}}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = epoll_create1(0x80000)
r5 = fcntl$dupfd(r3, 0x406, r4)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)={0x10000014})
r6 = getpid()
r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r5, &(0x7f0000000100)={r4, r5})
socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x20, 0x12, 0x1}, 0x20}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000001c0), 0xc7)

3m19.243570883s ago: executing program 0 (id=2401):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000034e90000000004009500000000000000431a52e8d846c1ffc91aa28653b1525fde0a7eced56b40f32f8fa31662f01099b9be9c4298b7319ed7997b77a9f451f6cbef921e5bcef760f067269364c6ad2c5be6dde54516321ae0ada0a84fef50f5867190f1c8afab23ba0e2c2f3814c668f5e9080000000000000016b2ae431bf9320b0bd96b4dd18ed76f65c082b35a19e0044a23d043e829177ebbd321aff514b29936bdc81bdcf13b002276797436a6bfbc4ec3e35aca4b75d47dcb00"], 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85513, &(0x7f0000000b00)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x400000, 0x0, 0x100000001, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8838, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x3, 0x800000000000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]})
socket$netlink(0x10, 0x3, 0xc)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001a40)=@newqdisc={0x34, 0x24, 0xd0f, 0x3, 0x3, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x42}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840)
syz_clone3(&(0x7f0000000300)={0x110080000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {0x21}, &(0x7f00000000c0)=""/81, 0x51, &(0x7f00000001c0)=""/36, &(0x7f0000000200)=[0x0, 0x0, 0xffffffffffffffff], 0x3}, 0x58)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x1c, r4, 0xe01, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040840}, 0x8004)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0)
write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
r7 = socket$netlink(0x10, 0x3, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000400)={0x800, 0xdc, 0xfffffff7, 0xd, '\x00', '\x00', '\x00', 0x101, 0x0, 0xfffffffa, 0x0, "616adfe59553f8cfcb5079956697a92e"})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x200c9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x38}, 0x1, 0xffffa888}, 0x20000880)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "1f000000"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf4}}, 0x0)

3m18.278599737s ago: executing program 0 (id=2402):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000580)='io_uring_register\x00', r0, 0x0, 0x3}, 0x18)
r1 = io_uring_setup(0x775, &(0x7f0000000340)={0x0, 0xa8c3, 0x1000, 0x3, 0xba})
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x28}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
syz_clone3(&(0x7f00000003c0)={0x22000, 0x0, &(0x7f00000001c0), 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast})
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e1a, @private=0xa010100}, {0x2, 0x4a2c, @remote}, {0x2, 0x4e25, @multicast2}, 0x84, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x4106, 0x2, 0x2})
write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc)
futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, &(0x7f0000edfff0)={0x0, 0x989680}, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0)

3m18.00359893s ago: executing program 0 (id=2404):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$inet6(0xa, 0x3, 0x4) (async)
socket(0x10, 0x80002, 0xfffffffe)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0xfffc, @broadcast}, 0x2}}, 0x2e) (async)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006800010025bd7000ffdbdf250a00040000000000f33905"], 0x18}, 0x1, 0x0, 0x0, 0x8810}, 0x40040d0) (async, rerun: 32)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e00, 0x0) (async, rerun: 32)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async, rerun: 32)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) (async, rerun: 32)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r2, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000081}, 0x4010)
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0)
syz_open_dev$evdev(0x0, 0x1, 0x0) (async)
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r7, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x40000) (async)
syz_emit_ethernet(0xf8, &(0x7f0000000780)=ANY=[], 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000001f40)={0x9, {{0xa, 0x0, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}, {{0xa, 0x2, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffff8}}}, 0x104)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="090000000a00004000000003ff020000000000000000000000000001"], 0x90)

3m17.793819317s ago: executing program 0 (id=2406):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
ioperm(0x7fffffff, 0x1, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
gettid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x5, 0x6, 0x1], 0xd5d5c004, 0x8340})
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, 0x1411, 0x10, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x10)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x84, 0x4, 0x5, 0x0, 0x9, 0x5, 0x40, 0x7, 0x6, 0x4, 0xf9, 0x8, 0x0, 0x0, 0x5, 0x2, 0x4, 0x3, 0x44, '\x00', 0x4, 0x9})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3m17.430802641s ago: executing program 0 (id=2407):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', <r2=>0x0})
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300000000000000, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10)
syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
socket(0x2, 0x5, 0x0)
r5 = syz_io_uring_setup(0x8d2, &(0x7f0000001400)={0x0, 0x9947, 0x2, 0xfffffffc, 0x3aa}, &(0x7f0000000280)=<r6=>0x0, &(0x7f0000000240)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r8 = socket$igmp6(0xa, 0x3, 0x2)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0)
futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0)
futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0, 0x40, 0x1})
io_uring_enter(r5, 0x47ba, 0x3e7c, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)

3m16.482530206s ago: executing program 0 (id=2412):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032b00)=""/102390, 0xffffffffffffff4f)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000580)}], 0x1)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000800000000850000001300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="d2ff03076003008cb89e08f088a8", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c)
r3 = socket(0x6, 0x1, 0x0)
getsockopt(r3, 0x200000000114, 0x5, &(0x7f0000019b00)=""/102385, &(0x7f0000000000)=0x18ff1)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@iter={&(0x7f0000000940), 0x10}}, 0x18)
pselect6(0x517, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8})
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
eventfd(0xffffffff)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r5}, 0x10)
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x12, 0xffffffffffffffff, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x1f, 0x7ffdd000, 0x8000}], 0x320000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000880)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r7, 0x402c5828, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x82cb000})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = memfd_create(&(0x7f00000005c0)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8<X\xfa\xdd\x8a6\xa1\x82\xf7r\xd8z\x85\x8do\xa5\xed\xd4\xbc8U\x1e\xf2tl8\xfe\xd0\x94\xfe\xf5\x1c+\x00U\te\xfa6\xca\xb9\xb4Q\xd9\xee\r6\x861h{\xc7z\'F\xc7\x91\x06x\xe1`\xf1:\xcf+\xd5\f\xb2\xce\xa4\x06\x90\x90\x9b\x1d\xcaa\xf7\x8f\x9e\x80\x93\xafT\xdfl\xec\xc6\x8e\x96\r[n\xc6\x99\x1fr<\x06\xb3\xbcT\x00\xda6\x18/\x18l\xc1\x81\x8e8L\xcb*S_\xd0:\xa4V\xbd\xf1\xa4\x955\xa9\x9d\xe0\x9b\xd3\x95\xc88n:\x89>?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4)
ftruncate(r8, 0x400000)
finit_module(r8, 0x0, 0x0)

3m1.403593944s ago: executing program 35 (id=2412):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032b00)=""/102390, 0xffffffffffffff4f)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000580)}], 0x1)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000800000000850000001300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="d2ff03076003008cb89e08f088a8", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c)
r3 = socket(0x6, 0x1, 0x0)
getsockopt(r3, 0x200000000114, 0x5, &(0x7f0000019b00)=""/102385, &(0x7f0000000000)=0x18ff1)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@iter={&(0x7f0000000940), 0x10}}, 0x18)
pselect6(0x517, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8})
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
eventfd(0xffffffff)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r5}, 0x10)
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x12, 0xffffffffffffffff, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x1f, 0x7ffdd000, 0x8000}], 0x320000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000880)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r7, 0x402c5828, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x82cb000})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = memfd_create(&(0x7f00000005c0)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8<X\xfa\xdd\x8a6\xa1\x82\xf7r\xd8z\x85\x8do\xa5\xed\xd4\xbc8U\x1e\xf2tl8\xfe\xd0\x94\xfe\xf5\x1c+\x00U\te\xfa6\xca\xb9\xb4Q\xd9\xee\r6\x861h{\xc7z\'F\xc7\x91\x06x\xe1`\xf1:\xcf+\xd5\f\xb2\xce\xa4\x06\x90\x90\x9b\x1d\xcaa\xf7\x8f\x9e\x80\x93\xafT\xdfl\xec\xc6\x8e\x96\r[n\xc6\x99\x1fr<\x06\xb3\xbcT\x00\xda6\x18/\x18l\xc1\x81\x8e8L\xcb*S_\xd0:\xa4V\xbd\xf1\xa4\x955\xa9\x9d\xe0\x9b\xd3\x95\xc88n:\x89>?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4)
ftruncate(r8, 0x400000)
finit_module(r8, 0x0, 0x0)

2m59.136509317s ago: executing program 6 (id=2494):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000034e90000000004009500000000000000431a52e8d846c1ffc91aa28653b1525fde0a7eced56b40f32f8fa31662f01099b9be9c4298b7319ed7997b77a9f451f6cbef921e5bcef760f067269364c6ad2c5be6dde54516321ae0ada0a84fef50f5867190f1c8afab23ba0e2c2f3814c668f5e9080000000000000016b2ae431bf9320b0bd96b4dd18ed76f65c082b35a19e0044a23d043e829177ebbd321aff514b29936bdc81bdcf13b002276797436a6bfbc4ec3e35aca4b75d47dcb00"], 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85513, &(0x7f0000000b00)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x400000, 0x0, 0x100000001, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8838, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x3, 0x800000000000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]})
socket$netlink(0x10, 0x3, 0xc)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001a40)=@newqdisc={0x34, 0x24, 0xd0f, 0x3, 0x3, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x42}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840)
syz_clone3(&(0x7f0000000300)={0x110080000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {0x21}, &(0x7f00000000c0)=""/81, 0x51, &(0x7f00000001c0)=""/36, &(0x7f0000000200)=[0x0, 0x0, 0xffffffffffffffff], 0x3}, 0x58)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x1c, r4, 0xe01, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040840}, 0x8004)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0)
write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
r8 = socket$netlink(0x10, 0x3, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000400)={0x800, 0xdc, 0xfffffff7, 0xd, '\x00', '\x00', '\x00', 0x101, 0x0, 0xfffffffa, 0x0, "616adfe59553f8cfcb5079956697a92e"})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x200c9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x38}, 0x1, 0xffffa888}, 0x20000880)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "1f000000"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf4}}, 0x0)

2m57.943682661s ago: executing program 6 (id=2497):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0079907b2b5c580dbc0001000000000a00000000b006"], 0x1c}}, 0x0) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0079907b2b5c580dbc0001000000000a00000000b006"], 0x1c}}, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$inet6(0xa, 0x80002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0xfffff000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0xfffff000, 0x0, 0x0, 0x0, 0x0}, 0x50)
getsockopt$inet6_mreq(r1, 0x29, 0x8, 0x0, &(0x7f0000000380)) (async)
getsockopt$inet6_mreq(r1, 0x29, 0x8, 0x0, &(0x7f0000000380))
r4 = syz_genetlink_get_family_id$team(&(0x7f00000004c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', <r5=>0x0})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)={<r6=>0x0, @rand_addr, @loopback}, &(0x7f0000000580)=0xc)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000680)={'syztnl2\x00', &(0x7f00000005c0)={'sit0\x00', 0x0, 0x8000, 0x7800, 0xffff, 0x9867c654, {{0x22, 0x4, 0x3, 0x1a, 0x88, 0x68, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, {[@generic={0x88, 0x9, "8941bff996014b"}, @lsrr={0x83, 0x2b, 0x76, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @loopback, @rand_addr=0x64010100, @private=0xa010101, @multicast2, @local, @multicast1, @broadcast]}, @ssrr={0x89, 0x1b, 0xe4, [@multicast1, @broadcast, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @local]}, @rr={0x7, 0x17, 0x24, [@multicast2, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x25}, @empty]}, @noop, @ssrr={0x89, 0xb, 0x5c, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000680)={'syztnl2\x00', &(0x7f00000005c0)={'sit0\x00', <r7=>0x0, 0x8000, 0x7800, 0xffff, 0x9867c654, {{0x22, 0x4, 0x3, 0x1a, 0x88, 0x68, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, {[@generic={0x88, 0x9, "8941bff996014b"}, @lsrr={0x83, 0x2b, 0x76, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @loopback, @rand_addr=0x64010100, @private=0xa010101, @multicast2, @local, @multicast1, @broadcast]}, @ssrr={0x89, 0x1b, 0xe4, [@multicast1, @broadcast, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @local]}, @rr={0x7, 0x17, 0x24, [@multicast2, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x25}, @empty]}, @noop, @ssrr={0x89, 0xb, 0x5c, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000006c0)=<r8=>0x0, &(0x7f0000000700)=0x4)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'ip6gre0\x00', <r9=>0x0, 0x29, 0xa, 0x2, 0xb, 0x63, @loopback, @rand_addr=' \x01\x00', 0x80, 0x20, 0x10, 0x81}})
socket$inet(0x10, 0x3, 0x0) (async)
r10 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bond0\x00', <r11=>0x0})
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r11, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x1, 0xb, 0x1}]}}]}, 0xb4}}, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000a00)={0x464, r4, 0xd4f4bc5fa6e4d055, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x6, 0x4, 0x80, 0x6}, {0x1ded, 0x0, 0x3, 0x834f}, {0x71ee, 0x8, 0xb, 0x10000}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x280, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x45530}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r11}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xa, 0x1, 0x2, 0x701}, {0x7, 0x6, 0xf, 0xa81}, {0x1, 0x4, 0x4, 0x694}, {0x7, 0x7, 0xb, 0x8}, {0x8, 0x8, 0x2, 0xb11d}]}}}]}}]}, 0x464}}, 0xc0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000040)={'wlan1\x00', @broadcast})
r13 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) (async)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r14, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1})
eventfd2(0x8, 0x1) (async)
r15 = eventfd2(0x8, 0x1)
ioctl$KVM_IRQFD(r14, 0x4020ae76, &(0x7f0000000080)={r15, 0x4}) (async)
ioctl$KVM_IRQFD(r14, 0x4020ae76, &(0x7f0000000080)={r15, 0x4})
ioctl$KVM_IRQFD(r14, 0x4020ae76, &(0x7f0000000040)={r15, 0x4, 0x1})
ioctl(r0, 0x8b32, &(0x7f0000000040))
statx(0xffffffffffffff9c, 0x0, 0x0, 0x8, &(0x7f0000000240))

2m57.828198935s ago: executing program 6 (id=2499):
prlimit64(0x0, 0x7, &(0x7f0000000340)={0x9, 0x80000000}, 0x0)
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x42f, 0x44000)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009})
r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000240)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000280)={0x0, {0x401, 0x2}})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r5=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000300)={r5, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r6, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, "b4bc323ef77d1f000071849800000000dfff00"}})
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]})
r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x22800, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000700)=0x31)
close_range(r7, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_DQEVENT(r0, 0x80805659, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00040000000000000000000000000000000000000000332e0000c9261ef4000025d19f5ee1816d2c3471328284dc2a8f203100998b5c9f74cb3ab4babd314ce0dd9f23cc49aaec0707f8d425256f"], 0x48)

2m57.760972466s ago: executing program 6 (id=2500):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r1=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x5}, 0x50) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x5}, 0x50)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x1f, 0xd, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x53, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2002}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000104feffffff0000000000000000", @ANYRES32=r1, @ANYBLOB="8200000037800b00030069703676746900001cbb00000000000000000000000000000037a46b7b7fcf30bc73ff366cd861a76c335c045b5e2a1d65e02d05fbdb815192720893df1f6a4c9d4dec175aa9ce34d8d5aa6b6cc951e9f751d94e8f9c76913865047ad898c85631f6f636909988b4c001eb503f997ce812eb8b164a3de1af21963a467e32"], 0x48}}, 0x8000)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095c96e90aa6a5409910cc6a81556a388acea03a44123c35d37c1c4623e081c53dc55c8c16cf031119e147af9de5e9ebef7e4e450bf76a180b5888a99487ad658d3396809374eb139cbc7551a738dcae1bb19ff85ec1792a2a0017fff15caa41ad0efea72d4bb5162d233a4ad3fefc58e1b28cda14498"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, 0x2}, 0xfffffffffffffda1)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r5}, 0x90)
signalfd(0xffffffffffffffff, 0x0, 0x0) (async)
signalfd(0xffffffffffffffff, 0x0, 0x0)
read(r6, &(0x7f0000000140)=""/119, 0x77) (async)
read(r6, &(0x7f0000000140)=""/119, 0x77)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r7, 0x0)
setpgid(0x0, r7)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0)
r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
chmod(&(0x7f00000001c0)='./file0\x00', 0x9)
ioctl$AUTOFS_IOC_CATATONIC(r8, 0x9362, 0x0) (async)
ioctl$AUTOFS_IOC_CATATONIC(r8, 0x9362, 0x0)
ioctl$DRM_IOCTL_AGP_ENABLE(r8, 0x40046432, &(0x7f0000000300)=0x3a402a3c)

2m57.522494191s ago: executing program 6 (id=2501):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000140)=0x6, 0x4)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
syz_emit_ethernet(0x86, &(0x7f00000010c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500007800000000000190780a010102ac1414aa0c0090780100000047000000000000000011000000000000e00b0002440c0001ac1414bb4e210000443c0001e000000100000000ac1414bb00000000ac1414000000000000000000000000000000000000000000ac1e000100"/134], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000009, 0x114}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x50)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r6=>0x0})
bind$can_raw(r2, &(0x7f0000000000)={0x1d, r6}, 0x10)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
close_range(r1, 0xffffffffffffffff, 0x0)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x9, 0x4)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x9, @loopback}, 0x1c)

2m57.182414353s ago: executing program 6 (id=2503):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x8001, 0x4, 0x1, 0x5, 0x67, 0xcc7, 0x8, 0x7, 0xa, 0x4, 0xfffffffe, 0x1, 0x820, 0x1, 0x6, 0xfffffeff, 0x979d, 0x1a44d, 0xf7ffffe3, 0x40000003, 0x89, 0x2, 0xf27, 0x20001e58, 0xfffffbff, 0x8, 0x3c, 0x8, 0x9, 0x10000, 0xfffffff8]})
prctl$PR_SET_SECUREBITS(0x1c, 0x25)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'dt2815\x00', [0x1, 0x842, 0xfffffff8, 0x9, 0x6, 0x3, 0x88, 0x1, 0x8, 0x10000, 0x4, 0xee4, 0x3, 0xbc06, 0x5, 0x4, 0x4, 0x80000000, 0x5d766b32, 0xba04, 0x9, 0x7, 0x3, 0x7, 0x4, 0x2, 0x23, 0x5, 0x5, 0x9, 0x1, 0x6]})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r1, 0x0, 0x40040)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r6 = fanotify_init(0xf00, 0x0)
fanotify_mark(r6, 0x105, 0x5000003a, r5, 0x0)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x700, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)

2m57.117752569s ago: executing program 36 (id=2503):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x8001, 0x4, 0x1, 0x5, 0x67, 0xcc7, 0x8, 0x7, 0xa, 0x4, 0xfffffffe, 0x1, 0x820, 0x1, 0x6, 0xfffffeff, 0x979d, 0x1a44d, 0xf7ffffe3, 0x40000003, 0x89, 0x2, 0xf27, 0x20001e58, 0xfffffbff, 0x8, 0x3c, 0x8, 0x9, 0x10000, 0xfffffff8]})
prctl$PR_SET_SECUREBITS(0x1c, 0x25)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'dt2815\x00', [0x1, 0x842, 0xfffffff8, 0x9, 0x6, 0x3, 0x88, 0x1, 0x8, 0x10000, 0x4, 0xee4, 0x3, 0xbc06, 0x5, 0x4, 0x4, 0x80000000, 0x5d766b32, 0xba04, 0x9, 0x7, 0x3, 0x7, 0x4, 0x2, 0x23, 0x5, 0x5, 0x9, 0x1, 0x6]})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r1, 0x0, 0x40040)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r6 = fanotify_init(0xf00, 0x0)
fanotify_mark(r6, 0x105, 0x5000003a, r5, 0x0)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x700, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)

2.622909023s ago: executing program 2 (id=3358):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x400, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x6, 0xffff}, {0x0, 0xffe5}, {0x0, 0xffff}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x40002022, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x200004, 0x2, 0x1, 0x1}})
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) (async)
r3 = openat$rdma_cm(0xffffff9c, &(0x7f0000000140), 0x2, 0x0)
r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
pwritev(r4, &(0x7f0000000240)=[{&(0x7f0000000140)="f9", 0x1}], 0x1, 0x3, 0xd4bd) (async)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000300)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xc, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e21, 0x9, @mcast2, 0x2}}}, 0x118) (async)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) (async)
sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x100}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
fsopen(&(0x7f0000000440)='efs\x00', 0x1)
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00000003060500000000eca6f05f800000000605a78114b58e91319e91be2b976889b34100010007000004"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="f904000000000000a85ec35e0e62650419dec8da6f81ec00a3bd72000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001100)='cgroup.events\x00', 0x5000000, 0x0) (async)
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(0xffffffffffffffff, 0x7a6, &(0x7f0000000480)={0x6, 0x6, 0x3a84606d, 0x3, 0x6, 0x1}) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.242221315s ago: executing program 8 (id=3363):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x1a21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x2000000)

2.195459125s ago: executing program 8 (id=3365):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) (async)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async)
read$FUSE(0xffffffffffffffff, &(0x7f00000041c0)={0x2020, 0x0, 0x0, <r2=>0x0}, 0x2020)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x5, 0x0, 0x0, {0x0, 0x0, 0x20, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x2, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
stat(&(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002780)={0x0, <r4=>0x0}, &(0x7f00000027c0)=0xc)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002800)={{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@loopback}, 0x0, @in6=@private2}}, &(0x7f0000002900)=0xe4) (async)
r6 = getegid() (async)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, <r8=>0x0}, &(0x7f0000000280)=0x5)
setuid(r8) (async)
getresgid(&(0x7f0000002940), &(0x7f0000002980), &(0x7f00000029c0)=<r9=>0x0) (async)
read$FUSE(0xffffffffffffffff, &(0x7f0000002a00)={0x2020, 0x0, 0x0, <r10=>0x0}, 0x2020) (async)
r11 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r11, &(0x7f0000019540)=""/102392, 0x18ff8) (async)
r12 = getegid()
fchown(r11, 0x0, r12)
statx(0xffffffffffffff9c, &(0x7f0000004d80)='./file0\x00', 0x100, 0x800, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, <r13=>0x0}) (async)
fstat(r0, &(0x7f0000004ec0)={0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0}) (async)
r15 = getuid() (async)
r16 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002480), 0x0, &(0x7f00000024c0)={{'fd', 0x3d, r16}, 0x2c, {'rootmode', 0x3d, 0xc000}}) (async)
read$FUSE(r16, &(0x7f0000004280)={0x2020, 0x0, <r17=>0x0, <r18=>0x0, <r19=>0x0}, 0x2020)
write$FUSE_INIT(r16, &(0x7f0000004200)={0x50, 0x0, r17, {0x7, 0x29, 0x1, 0x20b61000, 0x0, 0x0, 0x0, 0xfffffff9}}, 0x50) (async)
syz_fuse_handle_req(r16, &(0x7f00000088c0)="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", 0x2000, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0xf, {0x7, 0x7, 0x0, {0x0, 0x9, 0x3, 0x8, 0x0, 0x5, 0x3, 0x8, 0x9, 0xc000, 0xa91, r18, r19, 0x972}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000380)="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", 0x2000, &(0x7f0000005180)={&(0x7f0000000140)={0x50, 0x0, 0x8, {0x7, 0x2b, 0x3, 0x554bea9c0384b69b, 0x7, 0x3, 0x4a0, 0x200, 0x0, 0x0, 0x11f, 0x9}}, &(0x7f00000000c0)={0x18, 0x0, 0x8, {0xa}}, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x81}}, &(0x7f0000000200)={0x18, 0x0, 0x4, {0x71}}, &(0x7f0000000240)={0x18, 0x0, 0x6, {0x1}}, &(0x7f0000000280)={0x28, 0xfffffffffffffffe, 0x5, {{0x6, 0x69, 0x2, 0xffffffffffffffff}}}, &(0x7f00000002c0)={0x60, 0x0, 0xa7, {{0x6, 0xc901, 0x81, 0xdd4, 0x40, 0x9, 0x6, 0x1}}}, &(0x7f0000002380)={0x18, 0xffffffffffffffda, 0x1}, &(0x7f00000023c0)={0x12, 0xfffffffffffffffe, 0x3, {']\x00'}}, &(0x7f0000002400)={0x20, 0x0, 0x6, {0x0, 0x4}}, &(0x7f0000002440)={0x78, 0x0, 0x1, {0xabb1, 0xd480, 0x0, {0x5, 0xffffffff80000000, 0x5, 0x0, 0x5, 0x263b77aa, 0x5, 0xd9b, 0xfff, 0x2000, 0x4, 0x0, 0xee00, 0xfffffffa, 0x10001}}}, &(0x7f0000002580)={0x90, 0x0, 0x8, {0x2, 0x2, 0x27d, 0x40000000, 0x3, 0x5, {0x1, 0xedb, 0x6, 0xd1, 0x1ff, 0x7, 0x1cc, 0x3, 0x8c, 0x2000, 0x81, 0x0, 0x0, 0x3}}}, &(0x7f0000002640)={0x70, 0x0, 0x9, [{0x4, 0x0, 0x8, 0x1, 'bridge0\x00'}, {0x0, 0x5, 0x8, 0x10, 'bridge0\x00'}, {0x4, 0x3, 0x8, 0xffffff3a, 'bridge0\x00'}]}, &(0x7f0000004a40)={0x320, 0x0, 0x0, [{{0x4, 0x0, 0xa, 0x8, 0x1000, 0x6, {0x0, 0x7, 0xd, 0x6, 0x9, 0x6548, 0x9, 0xfffffffe, 0x6, 0xc000, 0xe5fb, r2, r3, 0x5, 0x9}}, {0x5, 0xb9, 0x4, 0x9, '-]\xf6('}}, {{0x1, 0x3, 0x0, 0x8, 0x101, 0x1edfa277, {0x2, 0x1, 0x4, 0x35, 0x5, 0x9, 0x824, 0x9, 0xc9, 0x1000, 0x3cc00, r4, 0xffffffffffffffff, 0x0, 0xa74d}}, {0x3, 0x101, 0x1, 0x2, '+'}}, {{0x6, 0x2, 0x6, 0x0, 0x2, 0x8, {0x5, 0x4, 0x9, 0x4, 0x5, 0x9, 0x0, 0x1, 0x8, 0x0, 0x5, r5, r6, 0x1, 0x1}}, {0x4, 0xff, 0x0, 0xf0000000}}, {{0x6, 0x0, 0x8, 0x1, 0x280000, 0x1, {0x6, 0x6348, 0xfffffffffffffffd, 0x1000, 0x7fff, 0x2, 0x4aca, 0x800, 0x10c8, 0x2000, 0x8001, r8, r9, 0x5e, 0x1}}, {0x0, 0x44, 0x0, 0x5}}, {{0x0, 0x0, 0x400, 0x1, 0x40, 0x1, {0x3, 0x2, 0x2, 0x9a800, 0x1, 0x400, 0x59, 0x8000, 0x87, 0x2000, 0x10, r10, r12, 0x7}}, {0x0, 0x8, 0x8, 0x7, 'bridge0\x00'}}]}, &(0x7f0000004f40)={0xa0, 0x0, 0x8, {{0x2, 0x3, 0x9, 0xa7e, 0x5, 0x9, {0x4, 0x8, 0x0, 0xffffffffffff6fbb, 0x40, 0x9, 0x2, 0x3, 0x45553202, 0x6000, 0x374, r13, r14, 0x0, 0x2000}}, {0x0, 0x9}}}, &(0x7f0000005000)={0x20, 0x0, 0x9, {0xffffffb7, 0x0, 0xb, 0x200}}, &(0x7f0000005040)={0x130, 0xfffffffffffffffe, 0x9, {0x9, 0x7, 0x0, '\x00', {0x4000, 0x4, 0x1, 0x7, r15, r19, 0x6000, '\x00', 0xfffffffffffffff9, 0x400, 0x4, 0x200, {0x4, 0xf}, {0x100, 0xdf}, {0x2, 0x8000}, {0x3, 0x9}, 0x80000000, 0x2, 0x8}}}}) (async)
r20 = socket(0x10, 0x3, 0x0)
sendmmsg(r20, &(0x7f0000000000), 0x4000000000001f2, 0x0)

2.141812812s ago: executing program 8 (id=3367):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0xff, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r1}, @ldst={0x1, 0x0, 0x4, 0x0, 0x0, 0x2}]}, &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x335, @time={0x80, 0xff}})
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0)
preadv2(r3, &(0x7f0000000040)=[{&(0x7f0000002200)=""/4100, 0x1004}, {&(0x7f00000000c0)=""/111, 0x6f}], 0x2, 0x0, 0x0, 0x0)

2.141590954s ago: executing program 2 (id=3368):
write$apparmor_current(0xffffffffffffffff, &(0x7f0000000000)=@profile={'changeprofile ', ':\x00\xd4 \x91;\xa4\xafo\\f\x10\x9d\xb3KP\xd2c\x01S3x\x9c\xa7\x94\x12\xcbR\xd3\fz\x94\b\x1bX\x05\x00\x00\x00\x00\x00\x00\x00\xde\x8b\xdc\xa3Aw\xe0n\xa8W'}, 0x43)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "6eee7e00"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x200004, 0x0, 0x2, 0x0, 0x1], 0x80a0000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.091072064s ago: executing program 8 (id=3369):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a3000"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'xfrm0\x00', &(0x7f0000000600)=@ethtool_test={0x1a, 0xffffffff, 0x1}})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a030000001f0000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040)

2.084906123s ago: executing program 8 (id=3370):
r0 = socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffff9c, 0x0, 0x121000, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48911}, 0x20000040)

2.084118581s ago: executing program 8 (id=3371):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85513, &(0x7f0000000b00)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x400000, 0x0, 0x100000001, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8838, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x3, 0x800000000000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]})
socket$netlink(0x10, 0x3, 0xc)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001a40)=@newqdisc={0x34, 0x24, 0xd0f, 0x3, 0x3, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x42}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840)
syz_clone3(&(0x7f0000000300)={0x110080000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {0x21}, &(0x7f00000000c0)=""/81, 0x51, &(0x7f00000001c0)=""/36, &(0x7f0000000200)=[0x0, 0x0, 0xffffffffffffffff], 0x3}, 0x58)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x1c, r4, 0xe01, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040840}, 0x8004)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0)
write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
r8 = socket$netlink(0x10, 0x3, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000400)={0x800, 0xdc, 0xfffffff7, 0xd, '\x00', '\x00', '\x00', 0x101, 0x0, 0xfffffffa, 0x0, "616adfe59553f8cfcb5079956697a92e"})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x200c9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x38}, 0x1, 0xffffa888}, 0x20000880)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "1f000000"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf4}}, 0x0)

1.999155795s ago: executing program 2 (id=3373):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xffffffffffffff64, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0xffffffffffffffff, 0x803, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x9)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0xfffffedb)
epoll_create1(0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_LOSS={0x34, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GI={0x4}]}]}}}]}, 0x80}}, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000002d00)={0x1, {{0xa, 0x4e22, 0x1000, @mcast2, 0x3}}, {{0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb0}}}, 0x108)
r6 = syz_open_procfs(0x0, &(0x7f0000000640)='net/mcfilter6\x00')
preadv(r6, &(0x7f0000001640)=[{&(0x7f0000000280)=""/191, 0xbf}], 0x1, 0x86, 0x451)
sendto$inet(r3, &(0x7f0000001600)="09268a927f1f6588b967481241ba7860fcfaf65ac635ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcec8044ab4ea6f7ae55d88fecf90b1a7511bf746b152124eb38d6c7a207112eb1bf554bc070626792d394df5adf7355fa5f8deb9db3da042d88", 0xfdef, 0x11, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)

1.704348014s ago: executing program 7 (id=3377):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (async)
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) (async)
r3 = socket$netlink(0x10, 0x3, 0xb) (async)
r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x9013, 0x100, 0x4, 0x165}, &(0x7f0000000000), &(0x7f0000000280)) (async)
syz_clone3(&(0x7f00000002c0)={0x8500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x58)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000140)={&(0x7f0000001000)={[{0x0, 0x5, 0x3, 0x700}]}, 0x1, 0x1}, 0x1) (async)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth1_to_batadv\x00', &(0x7f0000000300)=@ethtool_stats={0x1d, 0x3, [0x7, 0xffff, 0xff]}}) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000d00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="20f2e440b09d072f1b080000000000007b8af8ff00000000bfa200000000000007020000f8ffff08000000b70400000000000085000000030000019500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2)
ioctl$VIDIOC_DQEVENT(r6, 0x80885659, 0x0) (async)
io_setup(0x6, &(0x7f00000002c0)) (async)
syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2)

1.183280723s ago: executing program 4 (id=3384):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
setpriority(0x0, 0x0, 0x10000)
open(&(0x7f0000000140)='./file0\x00', 0x8000, 0x10)
clock_settime(0x0, &(0x7f0000000240)={0x77359400})

1.1211536s ago: executing program 4 (id=3385):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1a, 0x4, &(0x7f0000000040)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0xb8}, [@ldst={0x5}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x6, <r1=>r0})
write$vhost_msg_v2(r1, &(0x7f00000001c0)={0x2, 0x0, {&(0x7f0000000100)=""/182, 0xb6, &(0x7f0000000380)=""/4096, 0x2, 0x3}}, 0x48)

1.120670873s ago: executing program 4 (id=3386):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d214"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000480044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0)

1.114232545s ago: executing program 4 (id=3387):
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00')
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'geneve1\x00', <r1=>0x0})
r2 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x400000}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000000)={&(0x7f0000001000)={[{0x0, 0x52, 0x0, 0x300}, {0x0}, {0x0, 0xfffffffffffffec2}, {0x0}]}, 0x4}, 0x1)
r5 = socket(0x10, 0x3, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r5, 0x0, 0x0, 0x56, 0x200440c0, 0x1})
io_uring_enter(r2, 0x27e2, 0x0, 0x0, 0x0, 0x0)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x4, 0x4)
sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x810, &(0x7f0000000540)={0xc9, 0x0, r1}, 0x14)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, &(0x7f0000000040)='--\x00')

1.082627446s ago: executing program 4 (id=3388):
socket(0x10, 0x3, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
syz_io_uring_setup(0x6bfd, 0x0, &(0x7f0000000340), &(0x7f0000000240))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioprio_set$uid(0x0, 0x0, 0x4000)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @private2}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x1000, 0x200000}, 0xc)
r3 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
connect$unix(r4, &(0x7f0000000400)=@file={0x2, './file0\x00'}, 0x6e)
openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0)
r5 = syz_io_uring_setup(0x1110, &(0x7f0000000140)={0x0, 0xa07e, 0x400, 0x2, 0x1c1}, &(0x7f00000003c0)=<r6=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
sendmmsg$sock(r7, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
shutdown(r7, 0x1)

938.493063ms ago: executing program 2 (id=3389):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00')
lseek(r1, 0x9, 0x3)
ptrace(0x4206, r0)
tkill(r0, 0x12)
ptrace(0x4208, r0)
syz_open_dev$sndctrl(&(0x7f0000000e00), 0xfffffffc, 0x444000)
socket(0x15, 0x5, 0x6)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000100)={0x3, "a0159e"}, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0x200ccf5, 0x800, 0x200003, 0x318}, &(0x7f0000000140)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
setsockopt$MRT_DONE(r4, 0x0, 0xc9, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_setup(0x5f03, &(0x7f00000003c0)={0x0, 0xef71, 0x800, 0x2, 0x2f1}, &(0x7f00000001c0)=<r8=>0x0, &(0x7f0000000440))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/17], 0x0}, 0x94)
ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES16=r2, @ANYRES16=r8, @ANYRES64=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x24044815}, 0x0)
syz_io_uring_submit(r8, r7, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x8, 0x0, r4, 0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x200})
socket$xdp(0x2c, 0x3, 0x0)
io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0)
ptrace$cont(0x9, r0, 0x7, 0x101)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x2, 0x0, 0x0, 0x61000006, 0x0)

938.173486ms ago: executing program 7 (id=3390):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a3000"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'xfrm0\x00', &(0x7f0000000600)=@ethtool_test={0x1a, 0xffffffff, 0x1}})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000600000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040)

906.329701ms ago: executing program 7 (id=3391):
sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) (async)
r0 = socket(0xa, 0x3, 0x3a) (async, rerun: 32)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (rerun: 32)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x1fc, r3, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x35}, @void, @val={0xc, 0x99, {0x6, 0x2a}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x1d4, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x1d0, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x4c, 0x6, "3d13a1543ed97f5bef871ec0932c8168b648bef335e4e58b0728dd0fac3e95ba502834c97775b65afc5654569479a0122d86a63214c98163d051d8667f6359ff088c1756e294bfec"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0xc6, 0x6, "288ad7c4d544d03857a041355715ce1cddf1e2479f1f5d19ccc6c6ede71ea57da3c94009b63cebd6a48349627880e5bce85c12c026d1ac6c10c7a2579159ecbbf955a8295ef3c4c9a1d2210c1f3ce80171833636ae3254fa8f064a3fbe77b8915b52c6b9e2630886acdf8c759ce20042d2e43fda2f66278716f3910988d06ae4897b58c62f57b96f45cb9782dac7abddc8c066820e57c925a7b39445c67ecd4d99ed404fc69c4ecd26793840dcbdaba6f44657e22c093cd15908dac81df9f8eae71a"}, @NL80211_WOWLAN_TCP_WAKE_MASK={0xaf, 0xb, "8503abff42a3e214117b1b8c0cda6eb234efee1798ebc6158ca8e1d943ef01c7e802cdb6b44602c7b2fd92ed4a06b6539edf36fce7d5652331b940048c89b6445cecc97155d3b64cb056ded3d2fd02fa7cc5d150f86010bee61bd9c8af48b1cabaa266a4a628e31972ef67b9b9811666f13d4977b390460abe71f6a963712beb44dc2744979bedbc38eb87f7fcda6581119e130301581db3bdbab8ca16d92c381954c41e085e3b2334b684"}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x4}]}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4c080}, 0x4000) (async)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
fsetxattr$security_capability(r2, 0x0, 0x0, 0xfffffe04, 0x1) (async)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async, rerun: 32)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async, rerun: 32)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x141, 0x0, 0x4}, 0x18) (async, rerun: 64)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) (rerun: 64)
ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4}) (async)
mknod$loop(&(0x7f0000000200)='./file0\x00', 0x85c68e8ab9c77084, 0x0)
openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
gettid()
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) (async)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) (async)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)
recvmmsg(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x40000002, 0x0)

154.140679ms ago: executing program 4 (id=3392):
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
creat(&(0x7f0000000080)='./file0/file1\x00', 0x90)
r0 = getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000)
set_mempolicy(0x4005, &(0x7f0000000080)=0x3, 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4c831, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x34, 0x1, 0x70bd2d, 0x25dbdbfe, {0x1}, [@typed={0x8, 0x7, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000040)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGIFCONF(r2, 0x8912, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000100)='./bus\x00', 0xe8)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000000)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000300)={0xfc, 0x7, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0xc0, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x1c, 0x1, 0x0, 0x1, @queue={{}, @void}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_BYTEORDER_SREG={0xfffffffffffffe0d}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xfa}]}}}, {0x10, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x4}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x2c}]}}}]}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, 0xfc}, 0x1, 0x0, 0x0, 0x448d4}, 0x10000000)
chdir(&(0x7f00000001c0)='./bus\x00')
unlink(&(0x7f0000000100)='./file0/file1\x00')
rmdir(&(0x7f0000000000)='./file0\x00')

52.500116ms ago: executing program 7 (id=3393):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
setpriority(0x0, 0x0, 0x10000)
open(&(0x7f0000000140)='./file0\x00', 0x8000, 0x10)
clock_settime(0x0, &(0x7f0000000240)={0x77359400})

51.95364ms ago: executing program 7 (id=3394):
openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) (async, rerun: 64)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (rerun: 64)
connect$unix(r0, &(0x7f0000000600)=@abs, 0x6e) (async)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 64)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async)
write$bt_hci(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000023f3201"], 0x138) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
r3 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x23) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32)
sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a48000000060a0b040000000000000000020000001c0004801800018008000100647570000c000280080001400000008c0900010073797a3000000000090002007379"], 0x70}}, 0x0) (async, rerun: 32)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) (rerun: 64)
add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0681000000ba8b0a", 0xa, 0xfffffffffffffffc) (async)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) (async)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async, rerun: 32)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={&(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000380)="2136c67bac731b8c4fd464afed8d99be3544d65d968b382d535668d67363ec74b80dd70af195b7fc54d00b7a73e2b113f75c42c23c02d5ffde845e9e2bc4d805ea37ce3bfdaca9a8d6fcb6585b8bd99a454583465463092dacb8efa9b5b991750953469d35fd4293c65451840d8aad65323775d7b711e0be0748", 0x7a}, {&(0x7f0000000440)="30625ca8f9bf1672c28c0a5159caba81105b342fecae4522a2eb26c6be4c42c1aca7a9f6df16780992d54683d7b1e4ffe9c51687a47469d0504bec10ff76e05aa2422a95caa827f2894e9d3710b055d151b6b65018cf4f93fc11dae71304e5ac0c6b3629b7ec16e1a94d3fdf80cc1a36bd48eae30bfd6caa824d365c70de32e8482fd2ff468f484829d3fd61fdd6698e50f04756456407f9164fb77e62fd8393e01b7f9561d656e9d58d831196f00819c6d118a664c9a5b4d23ea683235026e8cd", 0xc1}, {&(0x7f0000000940)="228b26e23b14612583d07b306d0bc410e6b50ff02a493a54a8ef8fa917acf778e58ddf9352c353e844362dc09c7a5d9eff18aa4611522d660b82dbf63673abbd8883fc5b4d649907d18655fe75158f85b30e75a93cd1d0abfff3db3d6105ff3c748f7d204d8b058a0b384e2849ceb7923ee3d28d0e06e1ded558cd2a02d6dc9a0ad42d27f4e1462258e8cbadb905888ff18a7bc2c4dcb61b4631a7d144907b63c752babf19d69c3a81d5f394c91bac3d8f8dee27864fdebea117b33e13a23718151e4834c8afb1c5a7f97435bacfcf8a714293d9e8d0c4de018aea9b59f9a0c9d8c021dc9646c4b27ec243453a348d34e2d50339ca654663cd7efaf9c1e6f5a586d5b596fda1cb16585aeb73356085d5272a68dfb6deca7179f1f9ea45995ba384cecd3f5d21161df9790ebee17b579a989868a7db66fee8d7308a859bf71a4f00e898162a20b0630ba8aec03e1ce0677a9a321ed3412c63836bf036e6cdf60bd140aa2894b744a3c08c49e198813671ef0e127b2188e5", 0x177}, {&(0x7f0000000680)="8e0471048297e5c51c092952f3839e276d2e29d5e747be21ca5b2a13fb4b67f22f9077c5ca93ce60ba63aabbaade5323762aeb521be0cb7757fb7fbee9b5a3583c77ab532535d355028ab904dc9e7302398c9814239907b456b0c743cb87b4c3cab380e717f485c177894ce7609a7213183dccff0bff", 0x76}], 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="1c000000000400000000000008000000", @ANYBLOB="7fda730668e3550a4f3bbafba4b9d94c03093728f7f451d509380b7977b17578368e44c5cc0a8be563", @ANYRES32=r5, @ANYBLOB="148210602b5f6edbc3f8928665102922168256731663006d7857379d3a0c68f95ed6d6c4159984c3e52378c208ba2de7663f0ddbd138a72a682d4c76fd85851e90e432e4eeb3521fc9919b5e3d6c1ed2d1e6761a3798cc3c6be6528ce530f6b52dcb1eb531fbc7cf97"], 0x70}, 0x2040019) (rerun: 32)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async)
ptrace(0x4207, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil})
ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000000280)) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) (async)
get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000ffb000/0x2000)=nil, 0x3)

4.206121ms ago: executing program 2 (id=3395):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d214"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000600044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0)

3.146351ms ago: executing program 7 (id=3396):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket(0x2a, 0x2, 0x0)
ioctl$SIOCSIFMTU(r1, 0x541b, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x80000001, 0x10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_data=&(0x7f0000000100)="5d6e8b9be9d81d565ddf81e4554c0366e5526bdee60d18becae7e247acfc19bc"})
ioctl$sock_netdev_private(r5, 0x89f4, &(0x7f0000000000))
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a00001000000ebff200012800800010067747000140002800800030055000000080001"], 0x40}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x44, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x9, 0x9, 0x4, 0x1000}, {0x4, 0xf4, 0x3, 0x1}, {0xa0ef, 0xb, 0x1, 0x6560}, {0x3, 0x7, 0x80, 0x7}, {0x8, 0x16, 0x9, 0x4}]})
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x3)
setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4)
getdents64(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0)

0s ago: executing program 2 (id=3397):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xffffffffffffff64, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0xffffffffffffffff, 0x803, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x9)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0xfffffedb)
epoll_create1(0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_LOSS={0x34, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GI={0x4}]}]}}}]}, 0x80}}, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000002d00)={0x1, {{0xa, 0x4e22, 0x1000, @mcast2, 0x3}}, {{0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb0}}}, 0x108)
r6 = syz_open_procfs(0x0, &(0x7f0000000640)='net/mcfilter6\x00')
preadv(r6, &(0x7f0000001640)=[{&(0x7f0000000280)=""/191, 0xbf}], 0x1, 0x86, 0x451)
sendto$inet(r3, &(0x7f0000001600)="09268a927f1f6588b967481241ba7860fcfaf65ac635ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcec8044ab4ea6f7ae55d88fecf90b1a7511bf746b152124eb38d6c7a207112eb1bf554bc070626792d394df5adf7355fa5f8deb9db3da042d88", 0xfdef, 0x11, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

74][ T8851] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.184522][ T8851] usb 11-1: Product: syz
[  470.186374][ T8851] usb 11-1: Manufacturer: syz
[  470.188375][ T8851] usb 11-1: SerialNumber: syz
[  470.192264][ T8851] usb 11-1: config 0 descriptor??
[  470.199039][ T8851] usb 11-1: unsupported MDLM descriptors
[  470.600289][ T6059] usb 11-1: USB disconnect, device number 2
[  470.794496][ T5981] Bluetooth: hci0: command 0x041b tx timeout
[  471.380421][T15753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2471'.
[  472.180052][T15766] fuse: Unknown parameter 'r'
[  472.757498][ T6059] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  472.760798][ T6059] hid-generic 0000:0000:0000.001D: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  472.838889][T15777] bridge0: port 1(bridge_slave_0) entered disabled state
[  472.845099][T15777] bridge0: port 2(bridge_slave_1) entered disabled state
[  475.181475][ T5985] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  475.186875][ T5985] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  475.190928][ T5985] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  475.197060][ T5985] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  475.200535][ T5985] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  475.232858][T15816] lo speed is unknown, defaulting to 1000
[  475.454477][T15816] chnl_net:caif_netlink_parms(): no params data found
[  475.578736][T15816] bridge0: port 1(bridge_slave_0) entered blocking state
[  475.581909][T15816] bridge0: port 1(bridge_slave_0) entered disabled state
[  475.585630][T15816] bridge_slave_0: entered allmulticast mode
[  475.588428][T15816] bridge_slave_0: entered promiscuous mode
[  475.594092][T15816] bridge0: port 2(bridge_slave_1) entered blocking state
[  475.596510][T15816] bridge0: port 2(bridge_slave_1) entered disabled state
[  475.598916][T15816] bridge_slave_1: entered allmulticast mode
[  475.601809][T15816] bridge_slave_1: entered promiscuous mode
[  475.659213][T15816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  475.666916][T15816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  475.720498][T15816] team0: Port device team_slave_0 added
[  475.727883][T15816] team0: Port device team_slave_1 added
[  475.775967][T15816] batman_adv: batadv0: Adding interface: batadv_slave_0
[  475.779027][T15816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  475.790003][T15816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  475.796797][T15816] batman_adv: batadv0: Adding interface: batadv_slave_1
[  475.799755][T15816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  475.810709][T15816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  475.882308][T15816] hsr_slave_0: entered promiscuous mode
[  475.884856][T15816] hsr_slave_1: entered promiscuous mode
[  475.886945][T15816] debugfs: 'hsr0' already exists in 'hsr'
[  475.888733][T15816] Cannot create hsr debugfs directory
[  475.913075][T15830] Bluetooth: MGMT ver 1.23
[  475.921669][T15830] netlink: 'syz.6.2490': attribute type 1 has an invalid length.
[  475.926361][T15830] netlink: 236 bytes leftover after parsing attributes in process `syz.6.2490'.
[  476.049831][T15816] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  476.056274][T15816] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  476.060956][T15816] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  476.067298][T15816] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  476.083234][T15816] bridge0: port 2(bridge_slave_1) entered blocking state
[  476.085539][T15816] bridge0: port 2(bridge_slave_1) entered forwarding state
[  476.087882][T15816] bridge0: port 1(bridge_slave_0) entered blocking state
[  476.090168][T15816] bridge0: port 1(bridge_slave_0) entered forwarding state
[  476.125819][T15816] 8021q: adding VLAN 0 to HW filter on device bond0
[  476.137555][T15335] bridge0: port 1(bridge_slave_0) entered disabled state
[  476.144199][T15335] bridge0: port 2(bridge_slave_1) entered disabled state
[  476.160038][T15816] 8021q: adding VLAN 0 to HW filter on device team0
[  476.169029][T15336] bridge0: port 1(bridge_slave_0) entered blocking state
[  476.171313][T15336] bridge0: port 1(bridge_slave_0) entered forwarding state
[  476.179872][T15335] bridge0: port 2(bridge_slave_1) entered blocking state
[  476.182919][T15335] bridge0: port 2(bridge_slave_1) entered forwarding state
[  476.230509][T15840] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  476.233274][T15840] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  476.246088][T15840] vhci_hcd vhci_hcd.0: Device attached
[  476.395793][T15816] 8021q: adding VLAN 0 to HW filter on device batadv0
[  476.523662][   T53] usb 46-1: SetAddress Request (10) to port 0
[  476.525773][   T53] usb 46-1: new SuperSpeed USB device number 10 using vhci_hcd
[  476.678230][T15816] veth0_vlan: entered promiscuous mode
[  476.682961][T15816] veth1_vlan: entered promiscuous mode
[  476.705638][T15816] veth0_macvtap: entered promiscuous mode
[  476.710102][T15816] veth1_macvtap: entered promiscuous mode
[  476.720230][T15816] batman_adv: batadv0: Interface activated: batadv_slave_0
[  476.726152][T15816] batman_adv: batadv0: Interface activated: batadv_slave_1
[  476.731527][T15336] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  476.735219][T15336] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  476.737970][T15336] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  476.742188][T15336] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  476.779037][T15334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  476.781632][T15334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  476.801490][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  476.804448][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  476.836405][T15842] vhci_hcd: connection reset by peer
[  476.838350][   T46] vhci_hcd: stop threads
[  476.839728][   T46] vhci_hcd: release socket
[  476.845114][   T46] vhci_hcd: disconnect device
[  476.983589][T15861] lo speed is unknown, defaulting to 1000
[  477.204174][ T6059] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  477.257362][ T6059] hid-generic 0000:0000:0000.001E: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  477.283706][ T5981] Bluetooth: hci4: command tx timeout
[  477.479570][T15870] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2485'.
[  478.046605][T15877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2496'.
[  478.096025][ T5985] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  478.103295][ T5985] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  478.108876][ T5985] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  478.112870][ T5985] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  478.118283][ T5985] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  478.200691][T15878] lo speed is unknown, defaulting to 1000
[  478.490863][T15896] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2498'.
[  478.507571][T15898] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2500'.
[  478.520340][T15896] bridge1: entered promiscuous mode
[  478.581380][T15878] chnl_net:caif_netlink_parms(): no params data found
[  478.689801][T15878] bridge0: port 1(bridge_slave_0) entered blocking state
[  478.692400][T15878] bridge0: port 1(bridge_slave_0) entered disabled state
[  478.699751][T15878] bridge_slave_0: entered allmulticast mode
[  478.703065][T15878] bridge_slave_0: entered promiscuous mode
[  478.708483][T15878] bridge0: port 2(bridge_slave_1) entered blocking state
[  478.711511][T15878] bridge0: port 2(bridge_slave_1) entered disabled state
[  478.715915][T15878] bridge_slave_1: entered allmulticast mode
[  478.719096][T15878] bridge_slave_1: entered promiscuous mode
[  478.799455][T15878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  478.807214][T15878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  478.856518][T15878] team0: Port device team_slave_0 added
[  478.861049][T15878] team0: Port device team_slave_1 added
[  478.901115][T15878] batman_adv: batadv0: Adding interface: batadv_slave_0
[  478.903587][T15878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  478.911834][T15878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  478.918529][T15878] batman_adv: batadv0: Adding interface: batadv_slave_1
[  478.920749][T15878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  478.928808][T15878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  478.996950][T15878] hsr_slave_0: entered promiscuous mode
[  479.019849][T15878] hsr_slave_1: entered promiscuous mode
[  479.022724][T15878] debugfs: 'hsr0' already exists in 'hsr'
[  479.032320][T15878] Cannot create hsr debugfs directory
[  479.113407][T15335] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.206211][T15335] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.306261][ T5985] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  479.309640][ T5985] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  479.312679][ T5985] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  479.314928][T15335] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.320173][ T5985] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  479.325766][ T5985] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  479.353659][ T5981] Bluetooth: hci4: command tx timeout
[  479.356871][T15915] lo speed is unknown, defaulting to 1000
[  479.445776][T15335] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.639319][T15915] chnl_net:caif_netlink_parms(): no params data found
[  479.703909][T15335] bridge_slave_1: left allmulticast mode
[  479.706034][T15335] bridge_slave_1: left promiscuous mode
[  479.709396][T15335] bridge0: port 2(bridge_slave_1) entered disabled state
[  479.722289][T15335] bridge_slave_0: left allmulticast mode
[  479.725605][T15335] bridge_slave_0: left promiscuous mode
[  479.727707][T15335] bridge0: port 1(bridge_slave_0) entered disabled state
[  480.072569][T15335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  480.078624][T15335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  480.083409][T15335] bond0 (unregistering): Released all slaves
[  480.154569][ T5981] Bluetooth: hci5: command tx timeout
[  480.209114][T15915] bridge0: port 1(bridge_slave_0) entered blocking state
[  480.212578][T15915] bridge0: port 1(bridge_slave_0) entered disabled state
[  480.215592][T15915] bridge_slave_0: entered allmulticast mode
[  480.219027][T15915] bridge_slave_0: entered promiscuous mode
[  480.270943][T15915] bridge0: port 2(bridge_slave_1) entered blocking state
[  480.275267][T15915] bridge0: port 2(bridge_slave_1) entered disabled state
[  480.278034][T15915] bridge_slave_1: entered allmulticast mode
[  480.282063][T15915] bridge_slave_1: entered promiscuous mode
[  480.326264][T15915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  480.349892][T15915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  480.394311][T15878] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  480.412175][T15878] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  480.418697][T15915] team0: Port device team_slave_0 added
[  480.421158][T15878] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  480.425628][T15878] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  480.431022][T15915] team0: Port device team_slave_1 added
[  480.509160][T15915] batman_adv: batadv0: Adding interface: batadv_slave_0
[  480.514197][T15915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  480.527008][T15915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  480.532280][T15915] batman_adv: batadv0: Adding interface: batadv_slave_1
[  480.534679][T15915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  480.549210][T15915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  480.568309][T15335] hsr_slave_0: left promiscuous mode
[  480.570649][T15335] hsr_slave_1: left promiscuous mode
[  480.572729][T15335] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  480.581490][T15335] batman_adv: batadv0: Removing interface: batadv_slave_0
[  480.589604][T15335] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  480.592149][T15335] batman_adv: batadv0: Removing interface: batadv_slave_1
[  480.606916][T15934] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2506'.
[  480.639959][T15335] veth1_macvtap: left promiscuous mode
[  480.642462][T15335] veth0_macvtap: left promiscuous mode
[  480.645171][T15335] veth1_vlan: left promiscuous mode
[  480.648002][T15335] veth0_vlan: left promiscuous mode
[  481.357048][ T5981] Bluetooth: hci0: command tx timeout
[  481.435720][ T5981] Bluetooth: hci4: command tx timeout
[  481.570361][T15335] team0 (unregistering): Port device team_slave_1 removed
[  481.604730][   T53] usb 46-1: device descriptor read/8, error -110
[  481.711893][T15335] team0 (unregistering): Port device team_slave_0 removed
[  482.015983][   T53] usb usb46-port1: attempt power cycle
[  482.235382][ T5981] Bluetooth: hci5: command tx timeout
[  482.543132][T15915] hsr_slave_0: entered promiscuous mode
[  482.554294][T15915] hsr_slave_1: entered promiscuous mode
[  482.556370][T15915] debugfs: 'hsr0' already exists in 'hsr'
[  482.558170][T15915] Cannot create hsr debugfs directory
[  482.594238][   T53] usb usb46-port1: unable to enumerate USB device
[  482.723798][ T2297] usb 9-1: new high-speed USB device number 27 using dummy_hcd
[  482.865402][T15878] 8021q: adding VLAN 0 to HW filter on device bond0
[  482.880217][ T2297] usb 9-1: config index 0 descriptor too short (expected 9, got 0)
[  482.882744][ T2297] usb 9-1: can't read configurations, error -22
[  482.888679][T15878] 8021q: adding VLAN 0 to HW filter on device team0
[  482.909954][T15334] bridge0: port 1(bridge_slave_0) entered blocking state
[  482.912229][T15334] bridge0: port 1(bridge_slave_0) entered forwarding state
[  482.918468][T15334] bridge0: port 2(bridge_slave_1) entered blocking state
[  482.920743][T15334] bridge0: port 2(bridge_slave_1) entered forwarding state
[  482.946303][T15915] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  482.950329][T15915] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  482.956831][T15915] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  482.962235][T15915] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  483.051100][T15915] 8021q: adding VLAN 0 to HW filter on device bond0
[  483.066401][T15915] 8021q: adding VLAN 0 to HW filter on device team0
[  483.071760][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state
[  483.074096][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state
[  483.080698][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state
[  483.082933][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state
[  483.133584][ T2297] usb 9-1: new high-speed USB device number 28 using dummy_hcd
[  483.158137][T15878] 8021q: adding VLAN 0 to HW filter on device batadv0
[  483.192570][T15878] veth0_vlan: entered promiscuous mode
[  483.200305][T15878] veth1_vlan: entered promiscuous mode
[  483.215721][T15915] 8021q: adding VLAN 0 to HW filter on device batadv0
[  483.234842][T15878] veth0_macvtap: entered promiscuous mode
[  483.239045][T15878] veth1_macvtap: entered promiscuous mode
[  483.249186][T15878] batman_adv: batadv0: Interface activated: batadv_slave_0
[  483.255649][T15878] batman_adv: batadv0: Interface activated: batadv_slave_1
[  483.264617][   T61] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  483.267414][   T61] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  483.284622][   T61] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  483.291785][   T61] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  483.327071][ T2297] usb 9-1: config index 0 descriptor too short (expected 9, got 0)
[  483.329569][ T2297] usb 9-1: can't read configurations, error -22
[  483.336222][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  483.338663][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  483.339904][ T2297] usb usb9-port1: attempt power cycle
[  483.358818][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  483.361373][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  483.387406][T15915] veth0_vlan: entered promiscuous mode
[  483.406026][T15915] veth1_vlan: entered promiscuous mode
[  483.433972][ T5981] Bluetooth: hci0: command tx timeout
[  483.435172][T15915] veth0_macvtap: entered promiscuous mode
[  483.445585][T15915] veth1_macvtap: entered promiscuous mode
[  483.475947][T15915] batman_adv: batadv0: Interface activated: batadv_slave_0
[  483.486146][T15915] batman_adv: batadv0: Interface activated: batadv_slave_1
[  483.495947][   T61] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  483.504516][ T1140] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  483.513765][ T5981] Bluetooth: hci4: command tx timeout
[  483.514547][ T1140] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  483.518779][ T1140] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  483.570823][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  483.573340][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  483.601717][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  483.604998][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  483.693623][ T2297] usb 9-1: new high-speed USB device number 29 using dummy_hcd
[  483.741668][ T2297] usb 9-1: config index 0 descriptor too short (expected 9, got 0)
[  483.759420][   T29] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  483.764131][   T29] hid-generic 0000:0000:0000.001F: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  483.783948][ T2297] usb 9-1: can't read configurations, error -22
[  483.831312][T15977] bridge0: port 1(bridge_slave_0) entered disabled state
[  483.834949][T15977] bridge0: port 2(bridge_slave_1) entered disabled state
[  483.890564][T15979] overlayfs: failed to resolve './file0': -2
[  483.934127][ T2297] usb 9-1: new high-speed USB device number 30 using dummy_hcd
[  483.968403][ T2297] usb 9-1: config index 0 descriptor too short (expected 9, got 0)
[  483.970946][ T2297] usb 9-1: can't read configurations, error -22
[  483.979885][ T2297] usb usb9-port1: unable to enumerate USB device
[  484.313760][ T5981] Bluetooth: hci5: command tx timeout
[  484.354738][T15984] /dev/sg0: Can't lookup blockdev
[  484.535234][T15991] Bluetooth: MGMT ver 1.23
[  484.538770][T15991] netlink: 'syz.8.2515': attribute type 1 has an invalid length.
[  484.543675][T15991] netlink: 236 bytes leftover after parsing attributes in process `syz.8.2515'.
[  484.604076][T15993] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2517'.
[  484.756466][T15998] random: crng reseeded on system resumption
[  485.109864][T16011] lo speed is unknown, defaulting to 1000
[  485.514652][ T5981] Bluetooth: hci0: command tx timeout
[  486.257051][   T40] audit: type=1326 audit(1757258194.318:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16032 comm="syz.7.2527" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x0
[  486.357544][T16037] pim6reg: entered allmulticast mode
[  486.393728][ T5981] Bluetooth: hci5: command tx timeout
[  486.872734][   T40] audit: type=1800 audit(1757258194.928:2206): pid=16047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2531" name="file0" dev="9p" ino=35913989 res=0 errno=0
[  487.107837][T16050] lo speed is unknown, defaulting to 1000
[  487.603689][ T5981] Bluetooth: hci0: command tx timeout
[  487.687991][T16061] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  487.886239][T16067] virtio-fs: tag </dev/md0> not found
[  487.901223][ T5981] Bluetooth: hci2: ACL packet for unknown connection handle 201
[  488.465959][T16080] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  488.524193][ T6059] libceph: connect (1)[c::]:6789 error -101
[  488.526308][ T6059] libceph: mon0 (1)[c::]:6789 connect error
[  488.579392][T16093] bridge1: the hash_elasticity option has been deprecated and is always 16
[  488.582119][T16093] bridge1: entered allmulticast mode
[  488.803759][ T6059] libceph: connect (1)[c::]:6789 error -101
[  488.806480][ T6059] libceph: mon0 (1)[c::]:6789 connect error
[  489.310082][T16088] ceph: No mds server is up or the cluster is laggy
[  489.314807][ T6059] libceph: connect (1)[c::]:6789 error -101
[  489.318005][ T6059] libceph: mon0 (1)[c::]:6789 connect error
[  490.360856][T16117] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2551'.
[  490.364924][T16117] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2551'.
[  490.367714][T16117] netlink: 6384 bytes leftover after parsing attributes in process `syz.8.2551'.
[  490.530759][T10110] IPVS: starting estimator thread 0...
[  490.643856][T16132] IPVS: using max 43 ests per chain, 103200 per kthread
[  491.823427][   T40] audit: type=1326 audit(1757258199.878:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16157 comm="syz.7.2562" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000
[  491.824955][T16158] tmpfs: Bad value for 'mpol'
[  491.842095][   T40] audit: type=1326 audit(1757258199.878:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16157 comm="syz.7.2562" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000
[  491.848774][   T40] audit: type=1326 audit(1757258199.888:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16157 comm="syz.7.2562" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f65579 code=0x7ffc0000
[  491.855701][   T40] audit: type=1326 audit(1757258199.888:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16157 comm="syz.7.2562" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000
[  491.862356][   T40] audit: type=1326 audit(1757258199.888:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16157 comm="syz.7.2562" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000
[  491.870009][   T40] audit: type=1326 audit(1757258199.898:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16157 comm="syz.7.2562" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f65579 code=0x7ffc0000
[  491.878911][   T40] audit: type=1326 audit(1757258199.898:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16157 comm="syz.7.2562" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7f65579 code=0x7ffc0000
[  491.885694][   T40] audit: type=1326 audit(1757258199.898:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16157 comm="syz.7.2562" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f65579 code=0x7ffc0000
[  491.892605][   T40] audit: type=1326 audit(1757258199.898:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16157 comm="syz.7.2562" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7f65579 code=0x7ffc0000
[  491.899239][   T40] audit: type=1326 audit(1757258199.898:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16157 comm="syz.7.2562" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7f65579 code=0x7ffc0000
[  492.359042][T16166] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2564'.
[  492.362007][T16166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2564'.
[  492.365019][T16166] netlink: 6384 bytes leftover after parsing attributes in process `syz.4.2564'.
[  493.306930][ T8851] IPVS: starting estimator thread 0...
[  493.401678][T16178] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2568'.
[  493.416241][T16176] IPVS: using max 44 ests per chain, 105600 per kthread
[  494.082218][T16186] syz.4.2567 (16186): drop_caches: 2
[  494.595637][T16201] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2576'.
[  494.598566][T16201] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2576'.
[  494.601495][T16201] netlink: 6384 bytes leftover after parsing attributes in process `syz.8.2576'.
[  494.695933][T16202] virtio-fs: tag </dev/md0> not found
[  494.737747][T16205] comedi comedi3: aio_iiro_16: I/O port conflict (0x4f27,8)
[  494.840015][T16203] netlink: 'syz.4.2575': attribute type 12 has an invalid length.
[  495.067954][T16214] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  495.226139][ T6042] IPVS: starting estimator thread 0...
[  495.314669][T16221] IPVS: using max 43 ests per chain, 103200 per kthread
[  495.873707][    T9] usb 13-1: new full-speed USB device number 2 using dummy_hcd
[  496.035027][    T9] usb 13-1: config 0 has an invalid interface number: 8 but max is 0
[  496.037674][    T9] usb 13-1: config 0 has no interface number 0
[  496.042853][    T9] usb 13-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  496.051321][    T9] usb 13-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  496.062317][    T9] usb 13-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  496.072758][    T9] usb 13-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  496.081667][    T9] usb 13-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  496.084927][    T9] usb 13-1: Product: syz
[  496.087324][    T9] usb 13-1: SerialNumber: syz
[  496.100165][    T9] usb 13-1: config 0 descriptor??
[  496.105287][    T9] cm109 13-1:0.8: invalid payload size 0, expected 4
[  496.108448][    T9] input: CM109 USB driver as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.8/input/input26
[  496.308708][    C0] cm109 13-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  496.378231][T16239] sp0: Synchronizing with TNC
[  496.397421][T16239] [U] �
[  496.625675][T16248] __nla_validate_parse: 2 callbacks suppressed
[  496.625688][T16248] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2590'.
[  496.630523][T16248] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2590'.
[  496.633364][T16248] netlink: 6384 bytes leftover after parsing attributes in process `syz.7.2590'.
[  497.327001][T16256] netlink: 'syz.4.2591': attribute type 27 has an invalid length.
[  497.466797][T16256] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  497.478193][T16256] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  497.611446][T16257] 8021q: adding VLAN 0 to HW filter on device bond0
[  497.615393][T16257] 8021q: adding VLAN 0 to HW filter on device team0
[  497.621325][T16257] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  497.629626][T15333] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  497.634736][T15333] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  497.638080][T15333] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  497.645922][T15333] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  497.693661][ T6042] usb 9-1: new high-speed USB device number 31 using dummy_hcd
[  497.716799][ T6062] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  497.720134][ T6062] hid-generic 0000:0000:0000.0020: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  497.810002][T16261] bridge0: port 1(bridge_slave_0) entered disabled state
[  497.835796][T16261] bridge0: port 2(bridge_slave_1) entered disabled state
[  497.843629][ T6042] usb 9-1: Using ep0 maxpacket: 16
[  497.846873][ T6042] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[  497.849480][ T6042] usb 9-1: config 0 has no interface number 0
[  497.853903][ T6042] usb 9-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  497.856701][ T6042] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  497.859182][ T6042] usb 9-1: Product: syz
[  497.860767][ T6042] usb 9-1: Manufacturer: syz
[  497.862280][ T6042] usb 9-1: SerialNumber: syz
[  497.865376][ T6042] usb 9-1: config 0 descriptor??
[  497.869196][ T6042] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  497.887335][T16261] bridge1: left promiscuous mode
[  498.693847][ T6042] gspca_spca1528: reg_w err -110
[  498.713913][ T6042] spca1528 9-1:0.1: probe with driver spca1528 failed with error -110
[  498.775620][    C2] cm109 13-1:0.8: cm109_urb_ctl_callback: urb status -71
[  498.775829][   T10] usb 13-1: USB disconnect, device number 2
[  498.777841][    C2] cm109 13-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  498.805092][   T10] cm109 13-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  498.997956][T16267] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2593'.
[  500.217941][T10110] usb 9-1: USB disconnect, device number 31
[  500.757990][T10110] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  500.777192][T10110] hid-generic 0000:0000:0000.0021: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  500.823985][T16287] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2600'.
[  500.826700][T16287] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2600'.
[  500.829532][T16287] netlink: 6384 bytes leftover after parsing attributes in process `syz.8.2600'.
[  501.476744][T16303] lo speed is unknown, defaulting to 1000
[  501.729194][T16307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2604'.
[  502.228405][T16315] netlink: 'syz.2.2606': attribute type 27 has an invalid length.
[  502.633636][ T6476] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  502.844605][T16315] bridge0: port 2(bridge_slave_1) entered disabled state
[  502.848174][T16315] bridge0: port 1(bridge_slave_0) entered disabled state
[  502.863590][ T6476] usb 7-1: Using ep0 maxpacket: 16
[  502.870115][ T6476] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  502.872638][ T6476] usb 7-1: config 0 has no interface number 0
[  502.876801][ T6476] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  502.881527][ T6476] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  502.919373][ T6476] usb 7-1: Product: syz
[  502.921921][ T6476] usb 7-1: Manufacturer: syz
[  502.930437][ T6476] usb 7-1: SerialNumber: syz
[  502.935361][ T6476] usb 7-1: config 0 descriptor??
[  502.941194][ T6476] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  503.046357][T16315] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  503.059792][T16315] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  503.222489][   T40] kauditd_printk_skb: 41 callbacks suppressed
[  503.222500][   T40] audit: type=1326 audit(1757258211.278:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16332 comm="syz.8.2609" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000
[  503.238067][   T40] audit: type=1326 audit(1757258211.278:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16332 comm="syz.8.2609" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000
[  503.247833][   T40] audit: type=1326 audit(1757258211.298:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16332 comm="syz.8.2609" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf70ee579 code=0x7ffc0000
[  503.261749][   T40] audit: type=1326 audit(1757258211.328:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16332 comm="syz.8.2609" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000
[  503.283853][   T40] audit: type=1326 audit(1757258211.328:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16332 comm="syz.8.2609" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000
[  503.290720][   T40] audit: type=1326 audit(1757258211.328:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16332 comm="syz.8.2609" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ee579 code=0x7ffc0000
[  503.299766][   T40] audit: type=1326 audit(1757258211.328:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16332 comm="syz.8.2609" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000
[  503.309921][   T40] audit: type=1326 audit(1757258211.328:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16332 comm="syz.8.2609" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ee579 code=0x7ffc0000
[  503.310679][T16315] bridge1: left allmulticast mode
[  503.316587][   T40] audit: type=1326 audit(1757258211.328:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16332 comm="syz.8.2609" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000
[  503.329050][   T40] audit: type=1326 audit(1757258211.328:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16332 comm="syz.8.2609" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000
[  503.344099][T16321] 8021q: adding VLAN 0 to HW filter on device bond0
[  503.347192][T16321] 8021q: adding VLAN 0 to HW filter on device team0
[  503.351720][T16321] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  503.360654][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  503.369552][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  503.451151][T16341] pim6reg: entered allmulticast mode
[  503.453320][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  503.466953][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  503.495336][T16341] pim6reg: left allmulticast mode
[  503.713863][ T6476] gspca_spca1528: reg_w err -110
[  503.733840][ T6476] spca1528 7-1:0.1: probe with driver spca1528 failed with error -110
[  503.826961][T16352] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2611'.
[  504.087299][T16361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2613'.
[  504.326631][T16361] bridge_slave_0 (unregistering): left allmulticast mode
[  504.332317][T16361] bridge_slave_0 (unregistering): left promiscuous mode
[  504.340935][T16361] bridge0: port 1(bridge_slave_0) entered disabled state
[  504.368714][T16371] sp0: Synchronizing with TNC
[  504.384559][T16371] sp0: Found TNC
[  504.743620][ T6476] usb 9-1: new high-speed USB device number 32 using dummy_hcd
[  504.933603][ T6476] usb 9-1: Using ep0 maxpacket: 32
[  504.940644][ T6476] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[  504.943150][ T6476] usb 9-1: config 0 has no interface number 0
[  504.949114][ T6476] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  504.952017][ T6476] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  504.954605][ T6476] usb 9-1: Product: syz
[  504.957483][ T6476] usb 9-1: Manufacturer: syz
[  504.959679][ T6476] usb 9-1: SerialNumber: syz
[  504.963368][ T6476] usb 9-1: config 0 descriptor??
[  504.968297][ T6476] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  504.970998][ T6476] usb 9-1: selecting invalid altsetting 1
[  504.972726][ T6476] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  504.978693][ T6476] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  504.982426][ T6476] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  504.987467][ T6476] usb 9-1: media controller created
[  505.005820][ T6476] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  505.083214][T10111] usb 7-1: USB disconnect, device number 19
[  505.236542][   T10] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[  505.253630][   T10] hid-generic 0000:0000:0000.0022: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  505.465516][T16385] lo speed is unknown, defaulting to 1000
[  505.907658][ T6476] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  505.910498][ T6476] zl10353_read_register: readreg error (reg=127, ret==-71)
[  505.915537][ T6476] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  505.933957][ T6476] usb 9-1: USB disconnect, device number 32
[  506.495814][T16405] hub 1-0:1.0: USB hub found
[  506.497473][T16405] hub 1-0:1.0: 2 ports detected
[  507.287941][T16413] netlink: 'syz.2.2622': attribute type 1 has an invalid length.
[  507.313335][T16413] 8021q: adding VLAN 0 to HW filter on device bond1
[  507.343824][T16413] 8021q: adding VLAN 0 to HW filter on device bond1
[  507.346866][T16413] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  507.365321][T16413] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  507.483161][T16419] input: syz1 as /devices/virtual/input/input28
[  507.569063][T16418] veth3: entered promiscuous mode
[  507.573605][T16418] bond1: (slave veth3): Enslaving as an active interface with a down link
[  507.593879][T16414] veth5: entered promiscuous mode
[  507.597440][T16414] bond1: (slave veth5): Enslaving as an active interface with a down link
[  507.741979][T16429] netlink: 'syz.7.2625': attribute type 27 has an invalid length.
[  508.233654][ T8851] usb 12-1: new high-speed USB device number 2 using dummy_hcd
[  508.383612][ T8851] usb 12-1: Using ep0 maxpacket: 16
[  508.482917][ T8851] usb 12-1: config 0 has an invalid interface number: 1 but max is 0
[  508.485656][ T8851] usb 12-1: config 0 has no interface number 0
[  508.510495][ T8851] usb 12-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  508.516345][ T8851] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  508.519555][ T8851] usb 12-1: Product: syz
[  508.521290][ T8851] usb 12-1: Manufacturer: syz
[  508.523182][ T8851] usb 12-1: SerialNumber: syz
[  508.534909][ T8851] usb 12-1: config 0 descriptor??
[  508.549149][ T8851] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  508.600951][T16429] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  508.792993][T16429] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  508.892715][T16448] fuse: Bad value for 'user_id'
[  508.894644][T16448] fuse: Bad value for 'user_id'
[  509.151081][T16453] netlink: 'syz.4.2630': attribute type 10 has an invalid length.
[  509.344460][ T8851] gspca_spca1528: reg_w err -110
[  509.373159][ T8851] spca1528 12-1:0.1: probe with driver spca1528 failed with error -110
[  509.501929][T16432] 8021q: adding VLAN 0 to HW filter on device bond0
[  509.504918][T16432] 8021q: adding VLAN 0 to HW filter on device team0
[  509.509383][T16432] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  509.584479][T16444] kthread_run failed with err -4
[  509.587306][T16452] netlink: 'syz.4.2630': attribute type 1 has an invalid length.
[  509.590335][T16453] team0: Device hsr_slave_0 failed to register rx_handler
[  509.591708][T16452] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2630'.
[  509.606981][T15317] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  509.610501][T15317] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  509.625503][T15317] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  509.628344][T15317] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  510.095458][T16467] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2641'.
[  510.098662][T16468] hub 1-0:1.0: USB hub found
[  510.098830][T16467] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2641'.
[  510.101226][T16468] hub 1-0:1.0: 2 ports detected
[  510.865270][ T6059] usb 12-1: USB disconnect, device number 2
[  511.084802][T16481] input: syz1 as /devices/virtual/input/input29
[  512.372697][   T40] kauditd_printk_skb: 20 callbacks suppressed
[  512.372709][   T40] audit: type=1804 audit(1757258220.428:2288): pid=16498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.2638" name="/newroot/32/bus/bus" dev="overlay" ino=203 res=1 errno=0
[  512.384101][   T40] audit: type=1804 audit(1757258220.448:2289): pid=16498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2638" name="/newroot/32/bus/bus" dev="overlay" ino=203 res=1 errno=0
[  512.814931][T16504] netlink: 'syz.7.2643': attribute type 11 has an invalid length.
[  512.817364][T16504] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2643'.
[  513.514079][T16518] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  513.727597][T16518] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  513.815955][T16518] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  514.075697][T16518] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  514.098249][T16527] netlink: 'syz.7.2650': attribute type 1 has an invalid length.
[  514.104226][T16527] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2650'.
[  514.114003][T16527] netlink: 'syz.7.2650': attribute type 10 has an invalid length.
[  514.118414][T16531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2651'.
[  514.119899][T16527] team0: Device hsr_slave_0 failed to register rx_handler
[  514.214611][T15334] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  514.236722][T15334] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  514.239031][ T6059] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  514.251648][ T1140] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  514.264054][T15334] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  514.303073][ T6059] hid-generic 0000:0000:0000.0023: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  514.317845][T16537] input: syz1 as /devices/virtual/input/input30
[  514.349527][T16539] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  514.381106][T16544] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2655'.
[  514.384991][T16544] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2655'.
[  514.388756][T16544] netlink: 6384 bytes leftover after parsing attributes in process `syz.8.2655'.
[  514.698319][T16549] lo speed is unknown, defaulting to 1000
[  515.424904][T16553] netlink: 'syz.2.2657': attribute type 12 has an invalid length.
[  515.843620][T10110] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  515.973678][T10110] usb 7-1: device descriptor read/64, error -71
[  516.223882][T10110] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  516.353679][T10110] usb 7-1: device descriptor read/64, error -71
[  516.464288][T10110] usb usb7-port1: attempt power cycle
[  516.816580][T10110] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  516.844900][T10110] usb 7-1: device descriptor read/8, error -71
[  517.143621][T10110] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  517.191672][T10110] usb 7-1: device descriptor read/8, error -71
[  517.273807][ T6059] usb 12-1: new high-speed USB device number 3 using dummy_hcd
[  517.314074][T10110] usb usb7-port1: unable to enumerate USB device
[  517.427911][ T6059] usb 12-1: config 0 has no interfaces?
[  517.429743][ T6059] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  517.432846][ T6059] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  517.450893][ T6059] usb 12-1: config 0 descriptor??
[  517.610062][T16582] input: syz1 as /devices/virtual/input/input31
[  517.745599][ T8851] usb 12-1: USB disconnect, device number 3
[  518.238577][T16588] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2667'.
[  518.241924][T16588] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2667'.
[  518.248165][T16588] netlink: 6384 bytes leftover after parsing attributes in process `syz.8.2667'.
[  518.620813][ T8851] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0
[  518.678138][ T8851] hid-generic 0000:0000:0000.0024: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  518.722995][T16594] veth3: left promiscuous mode
[  518.727016][T16594] veth5: left promiscuous mode
[  519.018738][T16600] netlink: 'syz.7.2670': attribute type 10 has an invalid length.
[  519.034125][T16600] batman_adv: batadv0: Adding interface: team0
[  519.036946][T16600] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  519.045311][T16600] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  519.064081][T16600] netlink: 'syz.7.2670': attribute type 10 has an invalid length.
[  519.073644][T16600] netlink: 2 bytes leftover after parsing attributes in process `syz.7.2670'.
[  519.077878][T16600] team0: entered promiscuous mode
[  519.083828][T16600] team_slave_0: entered promiscuous mode
[  519.088437][T16600] team_slave_1: entered promiscuous mode
[  519.091473][T16600] 8021q: adding VLAN 0 to HW filter on device team0
[  519.100134][T16600] batman_adv: batadv0: Interface activated: team0
[  519.102612][T16600] batman_adv: batadv0: Interface deactivated: team0
[  519.105461][T16600] batman_adv: batadv0: Removing interface: team0
[  519.129535][T16600] bridge0: port 3(team0) entered blocking state
[  519.131587][T16600] bridge0: port 3(team0) entered disabled state
[  519.143700][T16600] team0: entered allmulticast mode
[  519.145408][T16600] team_slave_0: entered allmulticast mode
[  519.147456][T16600] team_slave_1: entered allmulticast mode
[  519.271272][ T8851] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0
[  519.276231][ T8851] hid-generic 0000:0000:0000.0025: hidraw2: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  520.007390][ T8851] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  520.011251][ T8851] hid-generic 0000:0000:0000.0026: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  520.056372][ T1140] smc: removing ib device syz1
[  520.170139][T10111] syz1: Port: 1 Link DOWN
[  522.121369][T16628] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2679'.
[  522.125332][T16628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2679'.
[  522.128987][T16628] netlink: 6384 bytes leftover after parsing attributes in process `syz.4.2679'.
[  522.496272][T16642] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found
[  522.499827][T16642] UDF-fs: Scanning with blocksize 2048 failed
[  522.514002][T16642] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found
[  522.516295][T16642] UDF-fs: Scanning with blocksize 4096 failed
[  522.845287][T16648] bond0: entered promiscuous mode
[  522.847092][T16648] bond_slave_0: entered promiscuous mode
[  522.849457][T16648] bond_slave_1: entered promiscuous mode
[  522.852626][T16648] batadv0: entered promiscuous mode
[  522.855222][T16648] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  522.858681][T16648] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  522.862255][T16648] hsr1: entered allmulticast mode
[  522.865224][T16648] bond0: entered allmulticast mode
[  522.867034][T16648] bond_slave_0: entered allmulticast mode
[  522.869307][T16648] bond_slave_1: entered allmulticast mode
[  522.871435][T16648] batadv0: entered allmulticast mode
[  522.873926][T16648] 8021q: adding VLAN 0 to HW filter on device hsr1
[  522.879274][T16648] bond0: left promiscuous mode
[  522.880866][T16648] bond_slave_0: left promiscuous mode
[  522.882765][T16648] bond_slave_1: left promiscuous mode
[  522.885787][T16648] batadv0: left promiscuous mode
[  523.221705][T16663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2685'.
[  523.232027][T16663] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  523.398148][ T6059] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[  523.468654][ T6059] hid-generic 0000:0000:0000.0027: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  523.626823][T16675] netlink: 'syz.7.2692': attribute type 10 has an invalid length.
[  523.638347][T16675] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  523.663342][T16675] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2692'.
[  523.666267][T16675] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2692'.
[  524.048739][T16689] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2696'.
[  524.051912][T16689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2696'.
[  524.055547][T16689] netlink: 6384 bytes leftover after parsing attributes in process `syz.2.2696'.
[  524.700083][T16701] netlink: 4860 bytes leftover after parsing attributes in process `syz.8.2698'.
[  525.480945][T16731] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2705'.
[  525.514472][T16731] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  526.047921][   T10] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  526.051007][   T10] hid-generic 0000:0000:0000.0028: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  526.700828][T16757] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2712'.
[  526.703602][T16757] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2712'.
[  526.706380][T16757] netlink: 6384 bytes leftover after parsing attributes in process `syz.8.2712'.
[  527.358192][T16760] block nbd7: shutting down sockets
[  527.623636][T10111] usb 9-1: new high-speed USB device number 33 using dummy_hcd
[  527.646701][T16772] lo speed is unknown, defaulting to 1000
[  527.783794][T10111] usb 9-1: Using ep0 maxpacket: 8
[  527.789247][T10111] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  527.792562][T10111] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  527.796630][T10111] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  527.799951][T10111] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  527.804317][T10111] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  527.807783][T10111] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  528.069496][T16764] fuse: Unknown parameter 'f՛'
[  528.076197][T10111] usb 9-1: usb_control_msg returned -71
[  528.079809][T10111] usbtmc 9-1:16.0: can't read capabilities
[  528.088142][T10111] usb 9-1: USB disconnect, device number 33
[  528.614298][   T10] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0
[  528.685942][   T10] hid-generic 0000:0000:0000.0029: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  528.860884][T16805] __nla_validate_parse: 2 callbacks suppressed
[  528.860897][T16805] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2725'.
[  528.866894][T16805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2725'.
[  528.869895][T16805] netlink: 6384 bytes leftover after parsing attributes in process `syz.4.2725'.
[  529.423888][T16788] kexec: Could not allocate control_code_buffer
[  531.686928][T16874] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2741'.
[  532.224928][ T8851] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  532.281111][T16888] lo speed is unknown, defaulting to 1000
[  532.374310][ T8851] usb 7-1: Using ep0 maxpacket: 8
[  532.377562][ T8851] usb 7-1: config 0 has no interfaces?
[  532.379298][ T8851] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  532.382105][ T8851] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  532.385715][ T8851] usb 7-1: config 0 descriptor??
[  532.591138][   T10] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0
[  532.597342][   T10] hid-generic 0000:0000:0000.002A: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  532.669227][T16901] Bluetooth: MGMT ver 1.23
[  532.744874][T16884] block nbd1: server does not support multiple connections per device.
[  532.748760][T16884] block nbd1: shutting down sockets
[  533.244508][ T6476] usb 7-1: USB disconnect, device number 24
[  534.554621][ T6062] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[  534.713800][ T5985] Bluetooth: hci2: command 0x0419 tx timeout
[  534.713891][ T5981] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  541.128385][T16965] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2758'.
[  541.358755][T16978] netem: incorrect gi model size
[  541.360717][T16978] netem: change failed
[  542.190732][T16993] lo speed is unknown, defaulting to 1000
[  542.384987][ T6042] e1000 0000:00:06.0 eth0: Reset adapter
[  542.402351][T17001] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  542.537440][ T6476] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0
[  542.540764][ T6476] hid-generic 0000:0000:0000.002B: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  543.006122][T17025] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  543.009371][T17025] block device autoloading is deprecated and will be removed.
[  543.020646][T17025] loop0: detected capacity change from 0 to 2560
[  543.032198][T17025] Buffer I/O error on dev loop0, logical block 0, lost async page write
[  543.036090][T17025] Buffer I/O error on dev loop0, logical block 1, lost async page write
[  543.039223][T17025] Buffer I/O error on dev loop0, logical block 2, lost async page write
[  543.041973][T17025] Buffer I/O error on dev loop0, logical block 3, lost async page write
[  543.044752][T17025] Buffer I/O error on dev loop0, logical block 4, lost async page write
[  543.047228][T17025] Buffer I/O error on dev loop0, logical block 5, lost async page write
[  543.050128][T17025] Buffer I/O error on dev loop0, logical block 6, lost async page write
[  543.052863][T17025] Buffer I/O error on dev loop0, logical block 7, lost async page write
[  543.056084][T17025] Buffer I/O error on dev loop0, logical block 8, lost async page write
[  543.058884][T17025] Buffer I/O error on dev loop0, logical block 9, lost async page write
[  543.708161][T17032] lo speed is unknown, defaulting to 1000
[  544.554878][ T6042] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[  553.079062][T17056] TCP: tcp_parse_options: Illegal window scaling value 253 > 14 received
[  553.091793][T17056] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3)
[  553.094542][T17056] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  553.098251][T17056] vhci_hcd vhci_hcd.0: Device attached
[  553.427202][T17059] vhci_hcd: connection closed
[  553.428293][T15335] vhci_hcd: stop threads
[  553.442908][T15335] vhci_hcd: release socket
[  553.449880][T15335] vhci_hcd: disconnect device
[  553.850667][T17073] netlink: 'syz.4.2774': attribute type 10 has an invalid length.
[  553.856416][T17073] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  555.057929][   T10] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  555.200043][T17087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2778'.
[  555.206014][   T10] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  555.209848][   T10] usb 7-1: config 0 interface 0 has no altsetting 0
[  555.245864][T17095] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  555.369325][   T10] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  555.372680][   T10] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  555.375771][   T10] usb 7-1: Product: syz
[  555.377115][   T10] usb 7-1: Manufacturer: syz
[  555.378605][   T10] usb 7-1: SerialNumber: syz
[  555.383250][   T10] usb 7-1: config 0 descriptor??
[  555.392439][   T10] usb 7-1: selecting invalid altsetting 0
[  555.412697][T17095] tipc: Resetting bearer <eth:syzkaller0>
[  555.683288][T17083] random: crng reseeded on system resumption
[  555.726017][   T53] usb 7-1: USB disconnect, device number 25
[  556.517391][T17123] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  556.519560][T17123] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  556.522616][T17123] vhci_hcd vhci_hcd.0: Device attached
[  556.834141][   T53] usb 46-1: SetAddress Request (14) to port 0
[  556.840741][   T53] usb 46-1: new SuperSpeed USB device number 14 using vhci_hcd
[  557.263497][T17124] vhci_hcd: connection reset by peer
[  557.265536][T15334] vhci_hcd: stop threads
[  557.266902][T15334] vhci_hcd: release socket
[  557.272024][T15334] vhci_hcd: disconnect device
[  557.565122][T17146] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  557.726064][T17150] lo speed is unknown, defaulting to 1000
[  558.297541][T17153] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  559.003933][   T10] usb 13-1: new high-speed USB device number 3 using dummy_hcd
[  559.175511][   T10] usb 13-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  559.183910][   T10] usb 13-1: config 0 interface 0 has no altsetting 0
[  559.205843][   T10] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  559.208740][   T10] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  559.211297][   T10] usb 13-1: Product: syz
[  559.212660][   T10] usb 13-1: Manufacturer: syz
[  559.233653][   T10] usb 13-1: SerialNumber: syz
[  559.236273][   T10] usb 13-1: config 0 descriptor??
[  559.241621][   T10] usb 13-1: selecting invalid altsetting 0
[  559.526588][T17158] random: crng reseeded on system resumption
[  559.561439][   T10] usb 13-1: USB disconnect, device number 3
[  560.103967][    C3] vcan0: j1939_tp_rxtimer: 0xffff88806bc65800: rx timeout, send abort
[  560.604124][    C3] vcan0: j1939_tp_rxtimer: 0xffff88806bc65000: rx timeout, send abort
[  560.608230][    C3] vcan0: j1939_tp_rxtimer: 0xffff88806bc65800: abort rx timeout. Force session deactivation
[  560.833968][T17196] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  561.027119][T17209] binder: 17208:17209 ioctl c0306201 80000080 returned -14
[  561.107160][    C3] vcan0: j1939_tp_rxtimer: 0xffff88806bc65000: abort rx timeout. Force session deactivation
[  561.177915][T10110] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0
[  561.237621][T10110] hid-generic 0000:0000:0000.002C: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  561.263884][ T8851] usb 12-1: new high-speed USB device number 4 using dummy_hcd
[  561.424859][ T8851] usb 12-1: Using ep0 maxpacket: 32
[  561.429363][ T8851] usb 12-1: config 0 has no interfaces?
[  561.435705][ T8851] usb 12-1: New USB device found, idVendor=99a9, idProduct=1597, bcdDevice=e4.bb
[  561.439359][ T8851] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=31
[  561.441880][ T8851] usb 12-1: Product: syz
[  561.443285][ T8851] usb 12-1: Manufacturer: syz
[  561.445205][ T8851] usb 12-1: SerialNumber: syz
[  561.448094][ T8851] usb 12-1: config 0 descriptor??
[  561.643298][T17222] netem: incorrect gi model size
[  561.645390][T17222] netem: change failed
[  561.913639][   T53] usb 46-1: device descriptor read/8, error -110
[  562.334970][   T53] usb usb46-port1: attempt power cycle
[  562.504925][T17230] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2817'.
[  562.507855][T17230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2817'.
[  562.511002][T17230] netlink: 6384 bytes leftover after parsing attributes in process `syz.4.2817'.
[  562.543945][T17231] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  562.895651][   T53] usb usb46-port1: unable to enumerate USB device
[  564.065967][ T8851] usb 12-1: USB disconnect, device number 4
[  564.514140][ T8851] usb 12-1: new high-speed USB device number 5 using dummy_hcd
[  564.703749][ T8851] usb 12-1: Using ep0 maxpacket: 8
[  564.734712][ T8851] usb 12-1: unable to get BOS descriptor or descriptor too short
[  564.745383][ T8851] usb 12-1: unable to read config index 0 descriptor/start: -71
[  564.747339][T17275] netem: incorrect gi model size
[  564.747973][ T8851] usb 12-1: can't read configurations, error -71
[  564.752270][T17275] netem: change failed
[  565.097151][T17277] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2829'.
[  565.101093][T17277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2829'.
[  565.104662][T17277] netlink: 6384 bytes leftover after parsing attributes in process `syz.4.2829'.
[  565.270287][ T1140] Bluetooth: hci1: Frame reassembly failed (-84)
[  565.553234][T10110] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0
[  565.615092][T10110] hid-generic 0000:0000:0000.002D: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  566.213078][T17302] loop6: detected capacity change from 0 to 524287999
[  566.215579][T17302] buffer_io_error: 310 callbacks suppressed
[  566.215588][T17302] Buffer I/O error on dev loop6, logical block 0, async page read
[  566.220105][T17302] Buffer I/O error on dev loop6, logical block 0, async page read
[  566.222920][T17302] Buffer I/O error on dev loop6, logical block 0, async page read
[  566.225763][T17302] Buffer I/O error on dev loop6, logical block 0, async page read
[  566.228316][T17302] Buffer I/O error on dev loop6, logical block 0, async page read
[  566.230888][T17302] Buffer I/O error on dev loop6, logical block 0, async page read
[  566.233389][T17302] Buffer I/O error on dev loop6, logical block 0, async page read
[  566.236414][T17302] Buffer I/O error on dev loop6, logical block 0, async page read
[  566.238913][T17302] ldm_validate_partition_table(): Disk read failed.
[  566.241190][T17302] Buffer I/O error on dev loop6, logical block 0, async page read
[  566.243887][T17302] Buffer I/O error on dev loop6, logical block 0, async page read
[  566.246547][T17302] Dev loop6: unable to read RDB block 0
[  566.248607][T17302]  loop6: unable to read partition table
[  566.250473][T17302] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  566.286891][T17304] netlink: 14560 bytes leftover after parsing attributes in process `syz.8.2838'.
[  566.335108][T17302] ldm_validate_partition_table(): Disk read failed.
[  566.337539][T17302] Dev loop6: unable to read RDB block 0
[  566.340332][T17302]  loop6: unable to read partition table
[  566.342630][T17302] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  566.638622][T17311] netem: incorrect gi model size
[  566.640252][T17311] netem: change failed
[  567.273742][ T5985] Bluetooth: hci1: command 0x1003 tx timeout
[  567.273776][ T5981] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  567.369316][   T10] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0
[  567.374765][   T10] hid-generic 0000:0000:0000.002E: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  567.456174][T17325] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2846'.
[  567.459911][T17325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2846'.
[  567.463073][T17325] netlink: 6384 bytes leftover after parsing attributes in process `syz.2.2846'.
[  568.419374][T17333] blktrace: Concurrent blktraces are not allowed on nbd2
[  569.379103][T17349] usb usb8: selecting invalid altsetting 6
[  569.434230][T17357] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2854'.
[  569.548198][T17363] fuse: Bad value for 'fd'
[  569.586772][T17362] netlink: 156 bytes leftover after parsing attributes in process `syz.7.2855'.
[  570.150318][T17367] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2856'.
[  570.158217][T17367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2856'.
[  570.161906][T17367] netlink: 6384 bytes leftover after parsing attributes in process `syz.4.2856'.
[  570.260630][T17356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  570.456570][ T8851] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0
[  570.463629][ T8851] hid-generic 0000:0000:0000.002F: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  571.569481][T17394] pim6reg1: entered promiscuous mode
[  571.571186][T17394] pim6reg1: entered allmulticast mode
[  572.400719][T17405] netlink: 'syz.7.2866': attribute type 4 has an invalid length.
[  572.919791][T17413] netem: incorrect gi model size
[  572.921818][T17413] netem: change failed
[  573.113154][   T40] audit: type=1326 audit(1757258281.168:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17414 comm="syz.7.2869" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000
[  573.133854][   T40] audit: type=1326 audit(1757258281.168:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17414 comm="syz.7.2869" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000
[  573.140614][   T40] audit: type=1326 audit(1757258281.178:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17414 comm="syz.7.2869" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7f65579 code=0x7ffc0000
[  573.150683][   T40] audit: type=1326 audit(1757258281.188:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17414 comm="syz.7.2869" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000
[  573.157456][   T40] audit: type=1326 audit(1757258281.188:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17414 comm="syz.7.2869" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000
[  573.171865][   T40] audit: type=1326 audit(1757258281.198:2295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17418 comm="syz.7.2869" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7f65579 code=0x7ffc0000
[  573.179374][   T40] audit: type=1326 audit(1757258281.208:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17414 comm="syz.7.2869" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7f65579 code=0x7ffc0000
[  573.189516][   T40] audit: type=1326 audit(1757258281.228:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17414 comm="syz.7.2869" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000
[  573.199680][   T40] audit: type=1326 audit(1757258281.228:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17414 comm="syz.7.2869" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000
[  573.208921][   T40] audit: type=1326 audit(1757258281.228:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17419 comm="syz.7.2869" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7f65579 code=0x7ffc0000
[  573.603159][T17432] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  573.641908][T17432] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2871'.
[  573.645804][T17432] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2871'.
[  575.396154][T17470] tmpfs: Bad value for 'mpol'
[  575.489538][T17475] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2884'.
[  575.810785][T17484] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2888'.
[  575.814792][T17484] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2888'.
[  575.817646][T17484] netlink: 6384 bytes leftover after parsing attributes in process `syz.8.2888'.
[  575.862956][T17485] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2887'.
[  576.492829][T17496] hub 9-0:1.0: USB hub found
[  576.495442][T17496] hub 9-0:1.0: 1 port detected
[  578.890322][T17515] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2903'.
[  578.894761][T17515] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2903'.
[  578.898541][T17515] netlink: 6384 bytes leftover after parsing attributes in process `syz.8.2903'.
[  579.231303][T17524] pim6reg: entered allmulticast mode
[  579.236166][T17524] pim6reg: left allmulticast mode
[  579.520549][T17537] netlink: 'syz.2.2902': attribute type 33 has an invalid length.
[  579.525592][T17537] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2902'.
[  579.711204][T17550] Process accounting resumed
[  580.660407][T17568] lo speed is unknown, defaulting to 1000
[  580.964624][T17567] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  581.417338][T17577] comedi comedi3: aio_iiro_16: I/O port conflict (0x4f27,8)
[  582.025242][T17588] netlink: 'syz.4.2917': attribute type 1 has an invalid length.
[  582.047185][T17588] bond1: (slave bridge2): making interface the new active one
[  582.050389][T17588] bond1: (slave bridge2): Enslaving as an active interface with an up link
[  582.069480][T17586] netlink: 'syz.7.2916': attribute type 1 has an invalid length.
[  582.084141][T17586] 8021q: adding VLAN 0 to HW filter on device bond1
[  582.094660][T17586] 8021q: adding VLAN 0 to HW filter on device bond1
[  582.097013][T17586] bond1: (slave vti0): The slave device specified does not support setting the MAC address
[  582.100647][T17586] bond1: (slave vti0): Error -95 calling set_mac_address
[  582.119388][T17594] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2918'.
[  582.122605][T17594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2918'.
[  582.126115][T17594] netlink: 6384 bytes leftover after parsing attributes in process `syz.4.2918'.
[  582.141811][T17594] lo speed is unknown, defaulting to 1000
[  582.204897][T17572] Set syz1 is full, maxelem 65536 reached
[  582.273968][ T8851] e1000 0000:00:06.0 eth0: Reset adapter
[  582.373894][T17605] binder: BINDER_SET_CONTEXT_MGR already set
[  582.375879][T17605] binder: 17603:17605 ioctl 4018620d 80000040 returned -16
[  582.414223][ T8851] e1000 0000:00:06.0 eth0: Reset adapter
[  582.695331][T17617] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input34
[  582.804148][T17618] netem: incorrect gi model size
[  582.805837][T17618] netem: change failed
[  583.644157][T17642] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  584.564881][ T8851] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[  590.638460][T17667] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2928'.
[  590.671252][T17667] 8021q: adding VLAN 0 to HW filter on device bond1
[  590.740126][T10111] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0
[  590.745769][T10111] hid-generic 0000:0000:0000.0030: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  590.761347][T17667] vlan2: entered allmulticast mode
[  590.763055][T17667] bond1: entered allmulticast mode
[  591.170326][T17674] bond0: entered promiscuous mode
[  591.172237][T17674] bond_slave_0: entered promiscuous mode
[  591.174667][T17674] bond_slave_1: entered promiscuous mode
[  591.177202][T17674] batadv0: entered promiscuous mode
[  591.179331][T17674] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  591.182210][T17674] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  591.186013][T17674] hsr1: entered allmulticast mode
[  591.188073][T17674] 8021q: adding VLAN 0 to HW filter on device hsr1
[  591.297440][T17677] nfs: Unknown parameter '4'
[  591.473158][T17685] tipc: Started in network mode
[  591.475079][T17685] tipc: Node identity ac1414aa, cluster identity 4711
[  591.478164][T17685] tipc: Enabled bearer <udp:s>, priority 10
[  591.585288][T17685] could not allocate digest TFM handle sha1-ssse3
[  591.718901][   T40] kauditd_printk_skb: 9 callbacks suppressed
[  591.718917][   T40] audit: type=1800 audit(1757258299.778:2309): pid=17694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2942" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0
[  592.252393][T17700] netem: incorrect gi model size
[  592.254108][T17700] netem: change failed
[  592.337566][T17704] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2937'.
[  592.447421][T17706] bridge_slave_0: left allmulticast mode
[  592.449249][T17706] bridge_slave_0: left promiscuous mode
[  592.455591][T17706] bridge0: port 1(bridge_slave_0) entered disabled state
[  592.462286][T17706] bridge_slave_1: left allmulticast mode
[  592.464223][T17706] bridge_slave_1: left promiscuous mode
[  592.466100][T17706] bridge0: port 2(bridge_slave_1) entered disabled state
[  592.474054][T17706] bond0: (slave bond_slave_0): Releasing backup interface
[  592.478768][T17706] bond0: (slave bond_slave_1): Releasing backup interface
[  592.485251][T17706] team0: Port device team_slave_0 removed
[  592.489111][T17706] team0: Port device team_slave_1 removed
[  592.495010][T17706] batman_adv: batadv0: Removing interface: batadv_slave_0
[  592.499460][T17706] batman_adv: batadv0: Removing interface: batadv_slave_1
[  592.504384][T17706] bond1: (slave veth3): Releasing active interface
[  592.511844][T17706] bond1: (slave veth5): Releasing active interface
[  592.520885][T17705] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input35
[  592.528823][T17707] team0: Mode changed to "loadbalance"
[  592.597883][T17706] netlink: 'syz.2.2937': attribute type 10 has an invalid length.
[  592.603632][   T10] tipc: Node number set to 2886997162
[  592.608263][T17706] 8021q: adding VLAN 0 to HW filter on device bond0
[  592.613249][T17706] team0: Port device bond0 added
[  592.635051][T17706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2937'.
[  592.740470][T17706] team0 (unregistering): Port device bond0 removed
[  593.346362][ T6059] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0
[  593.363229][ T6059] hid-generic 0000:0000:0000.0031: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  593.394421][T17718] FAULT_INJECTION: forcing a failure.
[  593.394421][T17718] name failslab, interval 1, probability 0, space 0, times 0
[  593.398824][T17718] CPU: 3 UID: 0 PID: 17718 Comm: syz.8.2941 Not tainted syzkaller #0 PREEMPT(full) 
[  593.398841][T17718] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  593.398849][T17718] Call Trace:
[  593.398853][T17718]  <TASK>
[  593.398857][T17718]  dump_stack_lvl+0x16c/0x1f0
[  593.398895][T17718]  should_fail_ex+0x512/0x640
[  593.398918][T17718]  ? __kmalloc_noprof+0xbf/0x510
[  593.398933][T17718]  ? blk_rq_map_user_iov+0x2b2/0x13b0
[  593.398947][T17718]  should_failslab+0xc2/0x120
[  593.398961][T17718]  __kmalloc_noprof+0xd2/0x510
[  593.398976][T17718]  ? iov_iter_alignment+0xd8/0x4c0
[  593.398988][T17718]  blk_rq_map_user_iov+0x2b2/0x13b0
[  593.399005][T17718]  ? blk_queue_enter+0x684/0x7f0
[  593.399018][T17718]  ? __pfx_blk_rq_map_user_iov+0x10/0x10
[  593.399036][T17718]  ? __lock_acquire+0xb97/0x1ce0
[  593.399053][T17718]  ? import_ubuf+0x1b6/0x220
[  593.399065][T17718]  blk_rq_map_user_io+0x1ff/0x230
[  593.399080][T17718]  ? __pfx_blk_rq_map_user_io+0x10/0x10
[  593.399094][T17718]  ? aa_get_newest_label+0xd2/0x250
[  593.399109][T17718]  ? bpf_lsm_capable+0x9/0x10
[  593.399119][T17718]  ? security_capable+0x7e/0x260
[  593.399133][T17718]  sg_io+0x538/0xda0
[  593.399151][T17718]  scsi_ioctl+0x111b/0x1830
[  593.399165][T17718]  ? rpm_resume+0x811/0x1310
[  593.399183][T17718]  ? __pfx_scsi_ioctl+0x10/0x10
[  593.399199][T17718]  ? __pfx_rpm_resume+0x10/0x10
[  593.399215][T17718]  ? do_raw_spin_lock+0x12c/0x2b0
[  593.399236][T17718]  ? lockdep_hardirqs_on+0x7c/0x110
[  593.399252][T17718]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  593.399298][T17718]  ? __pm_runtime_resume+0xc3/0x170
[  593.399310][T17718]  sr_block_ioctl+0x202/0x250
[  593.399322][T17718]  ? __pfx_sr_block_ioctl+0x10/0x10
[  593.399333][T17718]  blkdev_compat_ptr_ioctl+0x9c/0xe0
[  593.399348][T17718]  ? __pfx_blkdev_compat_ptr_ioctl+0x10/0x10
[  593.399361][T17718]  compat_blkdev_ioctl+0x2ee/0x7a0
[  593.399377][T17718]  ? __pfx_compat_blkdev_ioctl+0x10/0x10
[  593.399394][T17718]  ? __pfx_compat_blkdev_ioctl+0x10/0x10
[  593.399408][T17718]  __ia32_compat_sys_ioctl+0x242/0x370
[  593.399428][T17718]  __do_fast_syscall_32+0x7c/0x3a0
[  593.399447][T17718]  do_fast_syscall_32+0x32/0x80
[  593.399464][T17718]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  593.399478][T17718] RIP: 0023:0xf70ee579
[  593.399487][T17718] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  593.399498][T17718] RSP: 002b:00000000f54de55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  593.399509][T17718] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000002285
[  593.399515][T17718] RDX: 0000000080000440 RSI: 0000000000000000 RDI: 0000000000000000
[  593.399524][T17718] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  593.399533][T17718] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  593.399541][T17718] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  593.399562][T17718]  </TASK>
[  593.493693][    C3] vkms_vblank_simulate: vblank timer overrun
[  593.670952][T17727] netem: incorrect gi model size
[  593.672539][T17727] netem: change failed
[  593.822628][T17731] netlink: 'syz.7.2945': attribute type 29 has an invalid length.
[  593.838884][T17731] netlink: 'syz.7.2945': attribute type 4 has an invalid length.
[  593.851617][T17731] netlink: 'syz.7.2945': attribute type 4 has an invalid length.
[  593.932057][T17730] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2946'.
[  594.025481][ T8851] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  594.028854][ T8851] hid-generic 0000:0000:0000.0032: hidraw2: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  594.809733][T17745] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  595.050104][   T40] audit: type=1326 audit(2000000001.109:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17744 comm="syz.4.2950" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000
[  595.057422][   T40] audit: type=1326 audit(2000000001.109:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17744 comm="syz.4.2950" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000
[  595.064782][   T40] audit: type=1326 audit(2000000001.109:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17744 comm="syz.4.2950" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f96579 code=0x7ffc0000
[  595.071467][   T40] audit: type=1326 audit(2000000001.109:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17744 comm="syz.4.2950" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000
[  595.080464][   T40] audit: type=1326 audit(2000000001.109:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17744 comm="syz.4.2950" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000
[  595.089102][   T40] audit: type=1326 audit(2000000001.119:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17744 comm="syz.4.2950" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f96579 code=0x7ffc0000
[  595.097944][   T40] audit: type=1326 audit(2000000001.119:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17744 comm="syz.4.2950" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000
[  595.105097][   T40] audit: type=1326 audit(2000000001.119:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17744 comm="syz.4.2950" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000
[  595.112053][   T40] audit: type=1326 audit(2000000001.119:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17744 comm="syz.4.2950" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f96579 code=0x7ffc0000
[  595.270851][T17742] netem: incorrect gi model size
[  595.272865][T17742] netem: change failed
[  595.803374][T17751] FAULT_INJECTION: forcing a failure.
[  595.803374][T17751] name failslab, interval 1, probability 0, space 0, times 0
[  595.808471][T17751] CPU: 3 UID: 0 PID: 17751 Comm: syz.4.2951 Not tainted syzkaller #0 PREEMPT(full) 
[  595.808496][T17751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  595.808507][T17751] Call Trace:
[  595.808514][T17751]  <TASK>
[  595.808521][T17751]  dump_stack_lvl+0x16c/0x1f0
[  595.808553][T17751]  should_fail_ex+0x512/0x640
[  595.808580][T17751]  ? __kmalloc_noprof+0xbf/0x510
[  595.808603][T17751]  ? bio_kmalloc+0x41/0x70
[  595.808626][T17751]  should_failslab+0xc2/0x120
[  595.808650][T17751]  __kmalloc_noprof+0xd2/0x510
[  595.808670][T17751]  ? trace_kmalloc+0x2b/0xd0
[  595.808694][T17751]  ? __kmalloc_noprof+0x242/0x510
[  595.808719][T17751]  bio_kmalloc+0x41/0x70
[  595.808743][T17751]  blk_rq_map_user_iov+0x43c/0x13b0
[  595.808773][T17751]  ? blk_queue_enter+0x684/0x7f0
[  595.808800][T17751]  ? __pfx_blk_rq_map_user_iov+0x10/0x10
[  595.808829][T17751]  ? __lock_acquire+0xb97/0x1ce0
[  595.808857][T17751]  ? import_ubuf+0x1b6/0x220
[  595.808879][T17751]  blk_rq_map_user_io+0x1ff/0x230
[  595.808903][T17751]  ? __pfx_blk_rq_map_user_io+0x10/0x10
[  595.808925][T17751]  ? aa_get_newest_label+0xd2/0x250
[  595.808950][T17751]  ? bpf_lsm_capable+0x9/0x10
[  595.808967][T17751]  ? security_capable+0x7e/0x260
[  595.808990][T17751]  sg_io+0x538/0xda0
[  595.809019][T17751]  scsi_ioctl+0x111b/0x1830
[  595.809042][T17751]  ? rpm_resume+0x811/0x1310
[  595.809071][T17751]  ? __pfx_scsi_ioctl+0x10/0x10
[  595.809097][T17751]  ? __pfx_rpm_resume+0x10/0x10
[  595.809121][T17751]  ? do_raw_spin_lock+0x12c/0x2b0
[  595.809156][T17751]  ? lockdep_hardirqs_on+0x7c/0x110
[  595.809181][T17751]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  595.809206][T17751]  ? __pm_runtime_resume+0xc3/0x170
[  595.809225][T17751]  sr_block_ioctl+0x202/0x250
[  595.809245][T17751]  ? __pfx_sr_block_ioctl+0x10/0x10
[  595.809261][T17751]  blkdev_compat_ptr_ioctl+0x9c/0xe0
[  595.809283][T17751]  ? __pfx_blkdev_compat_ptr_ioctl+0x10/0x10
[  595.809304][T17751]  compat_blkdev_ioctl+0x2ee/0x7a0
[  595.809326][T17751]  ? __pfx_compat_blkdev_ioctl+0x10/0x10
[  595.809352][T17751]  ? __pfx_compat_blkdev_ioctl+0x10/0x10
[  595.809376][T17751]  __ia32_compat_sys_ioctl+0x242/0x370
[  595.809405][T17751]  __do_fast_syscall_32+0x7c/0x3a0
[  595.809433][T17751]  do_fast_syscall_32+0x32/0x80
[  595.809460][T17751]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  595.809480][T17751] RIP: 0023:0xf7f96579
[  595.809493][T17751] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  595.809510][T17751] RSP: 002b:00000000f54a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  595.809527][T17751] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000002285
[  595.809537][T17751] RDX: 0000000080000440 RSI: 0000000000000000 RDI: 0000000000000000
[  595.809547][T17751] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  595.809557][T17751] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  595.809565][T17751] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  595.809588][T17751]  </TASK>
[  595.920152][    C3] vkms_vblank_simulate: vblank timer overrun
[  596.300696][T17766] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2956'.
[  596.601515][T17776] netem: incorrect gi model size
[  596.603838][T17776] netem: change failed
[  596.867982][T17778] netlink: 'syz.8.2959': attribute type 33 has an invalid length.
[  596.870987][T17778] netlink: 152 bytes leftover after parsing attributes in process `syz.8.2959'.
[  597.664696][T17784] ref_ctr going negative. vaddr: 0x80ffc002, curr val: -29824, delta: 1
[  597.668295][   T40] kauditd_printk_skb: 17 callbacks suppressed
[  597.668305][   T40] audit: type=1804 audit(2000000003.719:2336): pid=17784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2960" name="/newroot/127/file0" dev="tmpfs" ino=703 res=1 errno=0
[  597.669908][T17784] ref_ctr increment failed for inode: 0x2bf offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888052262040
[  597.973651][T17793] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  599.015429][T17805] netem: incorrect gi model size
[  599.017994][T17805] netem: change failed
[  599.522613][T17820] hub 9-0:1.0: USB hub found
[  599.524405][T17820] hub 9-0:1.0: 1 port detected
[  600.140023][T17837] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2974'.
[  600.235299][T17843] bond0: entered promiscuous mode
[  600.236967][T17843] bond_slave_0: entered promiscuous mode
[  600.238854][T17843] bond_slave_1: entered promiscuous mode
[  600.240711][T17843] syz_tun: entered promiscuous mode
[  600.244190][T17843] batadv0: entered promiscuous mode
[  600.247119][T17843] debugfs: 'hsr1' already exists in 'hsr'
[  600.249504][T17843] Cannot create hsr debugfs directory
[  600.251716][T17843] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  600.255959][T17843] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  600.260325][T17843] hsr1: entered allmulticast mode
[  600.262411][T17843] bond0: entered allmulticast mode
[  600.266647][T17843] bond_slave_0: entered allmulticast mode
[  600.269045][T17843] bond_slave_1: entered allmulticast mode
[  600.271500][T17843] syz_tun: entered allmulticast mode
[  600.274192][T17843] batadv0: entered allmulticast mode
[  600.277040][T17843] 8021q: adding VLAN 0 to HW filter on device hsr1
[  600.313819][ T5981] Bluetooth: hci4: command 0x0406 tx timeout
[  600.547687][   T40] audit: type=1804 audit(2000000006.609:2337): pid=17848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2977" name="/newroot/146/file0" dev="tmpfs" ino=796 res=1 errno=0
[  600.557290][T17848] ref_ctr going negative. vaddr: 0x80ffc002, curr val: -29824, delta: 1
[  600.561411][T17848] ref_ctr increment failed for inode: 0x31c offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888052261580
[  601.181244][T10110] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0
[  601.251690][T10110] hid-generic 0000:0000:0000.0033: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  601.441338][T17863] netem: incorrect gi model size
[  601.443126][T17863] netem: change failed
[  601.712566][T17865] netem: incorrect gi model size
[  601.714283][T17865] netem: change failed
[  601.885404][T17875] bond0: entered promiscuous mode
[  601.888074][T17875] batadv0: entered promiscuous mode
[  601.890057][T17875] debugfs: 'hsr1' already exists in 'hsr'
[  601.891936][T17875] Cannot create hsr debugfs directory
[  601.893833][T17875] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  601.897256][T17875] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  601.900927][T17875] hsr1: entered allmulticast mode
[  601.902936][T17875] bond0: entered allmulticast mode
[  601.906265][T17875] batadv0: entered allmulticast mode
[  601.908333][T17875] 8021q: adding VLAN 0 to HW filter on device hsr1
[  602.615243][   T10] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0
[  602.674987][   T10] hid-generic 0000:0000:0000.0034: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  602.887638][T17904] input: syz1 as /devices/virtual/input/input36
[  603.066053][   T40] audit: type=1326 audit(2000000001.409:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17905 comm="syz.2.2992" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000
[  603.072542][   T40] audit: type=1326 audit(2000000001.409:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17905 comm="syz.2.2992" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000
[  603.122170][   T40] audit: type=1326 audit(2000000001.409:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17905 comm="syz.2.2992" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000
[  603.139864][   T40] audit: type=1326 audit(2000000001.469:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17905 comm="syz.2.2992" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000
[  603.159323][   T40] audit: type=1326 audit(2000000001.469:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17905 comm="syz.2.2992" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000
[  603.183870][T17906] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[  603.186024][T17906] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  603.186697][   T40] audit: type=1326 audit(2000000001.519:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17905 comm="syz.2.2992" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf70de579 code=0x7ffc0000
[  603.188505][T17906] vhci_hcd vhci_hcd.0: Device attached
[  603.195175][   T40] audit: type=1326 audit(2000000001.519:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17905 comm="syz.2.2992" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70de579 code=0x7ffc0000
[  603.206147][   T40] audit: type=1326 audit(2000000001.519:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17905 comm="syz.2.2992" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70de579 code=0x7ffc0000
[  603.213059][   T40] audit: type=1326 audit(2000000001.539:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17905 comm="syz.2.2992" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf70de579 code=0x7ffc0000
[  603.220241][   T40] audit: type=1326 audit(2000000001.539:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17905 comm="syz.2.2992" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000
[  603.334244][T17918] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2995'.
[  603.505213][T17925] veth1_to_bond: entered allmulticast mode
[  603.511601][T17920] lo speed is unknown, defaulting to 1000
[  603.540584][T17906] lo speed is unknown, defaulting to 1000
[  603.633696][ T6059] usb 41-1: new low-speed USB device number 4 using vhci_hcd
[  603.884752][T17911] vhci_hcd: connection reset by peer
[  603.888435][ T1140] vhci_hcd: stop threads
[  603.889849][ T1140] vhci_hcd: release socket
[  603.891306][ T1140] vhci_hcd: disconnect device
[  604.129839][T17936] netlink: 'syz.4.2997': attribute type 1 has an invalid length.
[  604.143237][T17936] 8021q: adding VLAN 0 to HW filter on device bond2
[  604.156516][T17936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2997'.
[  604.276149][T17936] bond2 (unregistering): Released all slaves
[  604.337303][T17924] veth1_to_bond: left allmulticast mode
[  604.537646][T17939] lo speed is unknown, defaulting to 1000
[  604.709440][   T10] usb 9-1: new full-speed USB device number 34 using dummy_hcd
[  604.815652][ T5985] Bluetooth: hci5: link tx timeout
[  604.820155][ T5985] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  604.830943][ T5985] Bluetooth: hci5: link tx timeout
[  604.832871][ T5985] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  604.966154][T17940] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  604.983606][   T10] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  604.987193][   T10] usb 9-1: config 0 interface 0 has no altsetting 0
[  605.047554][   T10] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  605.050454][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  605.052894][   T10] usb 9-1: Product: syz
[  605.054583][   T10] usb 9-1: Manufacturer: syz
[  605.056070][   T10] usb 9-1: SerialNumber: syz
[  605.064714][   T10] usb 9-1: config 0 descriptor??
[  605.068844][   T10] usb 9-1: selecting invalid altsetting 0
[  605.679687][T17955] could not allocate digest TFM handle sha1-generic
[  606.062062][T17951] afs: Unknown parameter 'dynr'
[  606.065697][T17951] overlayfs: overlapping lowerdir path
[  606.200271][T17967] syz.8.3005 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  606.497450][T17978] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  606.500144][T17978] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  606.503710][T17978] vhci_hcd vhci_hcd.0: Device attached
[  606.560643][T17976] input: syz1 as /devices/virtual/input/input38
[  606.740615][T17983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  606.743459][T17983] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  606.873616][ T5985] Bluetooth: hci5: command 0x0406 tx timeout
[  607.058622][   T10] usb 9-1: USB disconnect, device number 34
[  607.142415][T17979] vhci_hcd: connection closed
[  607.144769][T15317] vhci_hcd: stop threads
[  607.145708][T17997] befs: (nbd8): No write support. Marking filesystem read-only
[  607.146305][T15317] vhci_hcd: release socket
[  607.149332][T17997] block nbd8: Attempted send on invalid socket
[  607.154193][T17997] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  607.158547][T17997] befs: (nbd8): unable to read superblock
[  607.171853][T15317] vhci_hcd: disconnect device
[  608.228236][T18009] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10)
[  608.230643][T18009] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  608.233495][T18009] vhci_hcd vhci_hcd.0: Device attached
[  608.543609][   T29] usb 46-1: SetAddress Request (18) to port 0
[  608.545786][   T29] usb 46-1: new SuperSpeed USB device number 18 using vhci_hcd
[  608.798726][ T6059] vhci_hcd: vhci_device speed not set
[  609.051712][T18010] vhci_hcd: connection reset by peer
[  609.054482][T15317] vhci_hcd: stop threads
[  609.056639][T15317] vhci_hcd: release socket
[  609.058701][T15317] vhci_hcd: disconnect device
[  609.349968][T18030] afs: Unknown parameter 'dynr'
[  609.352871][T18030] overlayfs: overlapping lowerdir path
[  609.387467][T18028] could not allocate digest TFM handle sha1-generic
[  610.134261][   T53] usb usb42-port1: attempt power cycle
[  610.143647][ T6059] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0
[  610.146918][ T6059] hid-generic 0000:0000:0000.0035: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  610.633678][ T5985] Bluetooth: hci5: command 0x0406 tx timeout
[  610.704303][   T53] usb usb42-port1: unable to enumerate USB device
[  610.869984][T18069] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3030'.
[  610.872918][T18069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3030'.
[  610.875854][T18069] netlink: 6384 bytes leftover after parsing attributes in process `syz.2.3030'.
[  611.204723][T18078] netlink: 'syz.4.3033': attribute type 10 has an invalid length.
[  611.212451][T18078] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  611.583369][T18089] netlink: 'syz.7.3035': attribute type 2 has an invalid length.
[  611.586655][T18089] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3035'.
[  611.591841][T18089] netlink: 'syz.7.3035': attribute type 2 has an invalid length.
[  611.597538][T18089] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3035'.
[  612.263008][T18101] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  612.274364][T18101] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  612.371744][T18110] bond0: entered promiscuous mode
[  612.374404][T18110] bond_slave_0: entered promiscuous mode
[  612.377213][T18110] bond_slave_1: entered promiscuous mode
[  612.379733][T18110] mac80211_hwsim hwsim43 wlan1: entered promiscuous mode
[  612.382909][T18110] bridge0: entered promiscuous mode
[  612.386781][T18110] batadv0: entered promiscuous mode
[  612.389448][T18110] debugfs: 'hsr1' already exists in 'hsr'
[  612.391824][T18110] Cannot create hsr debugfs directory
[  612.394746][T15317] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  612.403601][T15317] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  612.406929][T15317] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  612.410257][T15317] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  612.655680][T18118] lo speed is unknown, defaulting to 1000
[  612.887304][ T8851] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0
[  612.948657][ T8851] hid-generic 0000:0000:0000.0036: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  613.252871][T18143] netem: incorrect gi model size
[  613.254559][T18143] netem: change failed
[  613.603654][   T29] usb 46-1: device descriptor read/8, error -110
[  613.885213][T18171] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3061'.
[  613.932978][T18174] netlink: 'syz.4.3069': attribute type 4 has an invalid length.
[  613.937193][T18173] netlink: 'syz.4.3069': attribute type 4 has an invalid length.
[  613.995489][   T29] usb usb46-port1: attempt power cycle
[  614.109082][T18184] netlink: 'syz.2.3065': attribute type 1 has an invalid length.
[  614.111586][T18184] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3065'.
[  614.125956][   T40] kauditd_printk_skb: 16 callbacks suppressed
[  614.125965][   T40] audit: type=1326 audit(2000000000.189:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18182 comm="syz.2.3065" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70de579 code=0x0
[  614.663784][   T10] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  614.794132][   T29] usb usb46-port1: unable to enumerate USB device
[  614.826656][   T10] usb 7-1: config 1 has an invalid interface number: 7 but max is 0
[  614.830360][   T10] usb 7-1: config 1 has no interface number 0
[  614.835725][   T10] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023
[  614.844229][   T10] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16
[  614.852556][   T10] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x7 has an invalid bInterval 149, changing to 11
[  614.864182][   T10] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  614.867848][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  614.877569][   T10] usb 7-1: Product: syz
[  614.881224][   T10] usb 7-1: Manufacturer: syz
[  614.885360][   T10] usb 7-1: SerialNumber: syz
[  614.895207][T18204] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  614.898434][T18204] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  614.905759][   T10] usb 7-1: Error in usbnet_get_endpoints (-22)
[  615.068389][   T10] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0
[  615.124392][   T10] hid-generic 0000:0000:0000.0037: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  615.497261][T18231] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3078'.
[  615.500225][T18231] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3078'.
[  615.503195][T18231] netlink: 6384 bytes leftover after parsing attributes in process `syz.8.3078'.
[  615.680260][T18229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  615.684199][T18229] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  616.089198][T18229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  616.092620][T18229] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  616.097039][T18229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  616.100419][T18229] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  616.321399][T18242] IPVS: Error connecting to the multicast addr
[  617.423069][ T6062] usb 7-1: USB disconnect, device number 26
[  617.834145][T18263] mac80211_hwsim hwsim47 wlan1: entered allmulticast mode
[  617.847043][T18263] bond0: (slave syz_tun): Releasing backup interface
[  617.851209][T18263] syz_tun: left promiscuous mode
[  617.852865][T18263] syz_tun: left allmulticast mode
[  617.858137][T18263] team0: left allmulticast mode
[  617.859663][T18263] team_slave_0: left allmulticast mode
[  617.861732][T18263] team_slave_1: left allmulticast mode
[  617.863395][T18263] team0: left promiscuous mode
[  617.865584][T18263] team_slave_0: left promiscuous mode
[  617.867285][T18263] team_slave_1: left promiscuous mode
[  617.869172][T18263] bridge0: port 3(team0) entered disabled state
[  617.875141][T18263] bridge_slave_0: left allmulticast mode
[  617.876900][T18263] bridge_slave_0: left promiscuous mode
[  617.878682][T18263] bridge0: port 1(bridge_slave_0) entered disabled state
[  618.049506][T18263] bridge_slave_1: left allmulticast mode
[  618.051274][T18263] bridge_slave_1: left promiscuous mode
[  618.053068][T18263] bridge0: port 2(bridge_slave_1) entered disabled state
[  618.058097][T18263] bond0: (slave bond_slave_0): Releasing backup interface
[  618.064138][T18263] bond_slave_0: left promiscuous mode
[  618.065862][T18263] bond_slave_0: left allmulticast mode
[  618.068365][T18263] bond0: (slave bond_slave_1): Releasing backup interface
[  618.071271][T18263] bond_slave_1: left promiscuous mode
[  618.072982][T18263] bond_slave_1: left allmulticast mode
[  618.077627][T18263] team0: Port device team_slave_0 removed
[  618.082077][T18263] team0: Port device team_slave_1 removed
[  618.084891][T18263] batman_adv: batadv0: Removing interface: batadv_slave_0
[  618.090800][T18263] batman_adv: batadv0: Removing interface: batadv_slave_1
[  618.098285][T18269] netlink: 'syz.7.3086': attribute type 10 has an invalid length.
[  618.105047][T18269] mac80211_hwsim hwsim47 wlan1: left allmulticast mode
[  618.109627][T18269] bond0: (slave wlan1): Opening slave failed
[  619.087863][T18290] ceph: No mds server is up or the cluster is laggy
[  619.534964][T18301] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3095'.
[  619.538897][T18301] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3095'.
[  619.573084][T18301] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3095'.
[  619.575946][T18301] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3095'.
[  619.631462][T18301] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3095'.
[  619.634579][T18301] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3095'.
[  619.828886][T18299] Process accounting resumed
[  620.152826][T18318] netlink: 'syz.8.3107': attribute type 1 has an invalid length.
[  620.284801][T18325] netem: incorrect gi model size
[  620.286375][T18325] netem: change failed
[  620.296136][T18327] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3102'.
[  620.299022][T18327] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3102'.
[  620.301717][T18327] netlink: 6384 bytes leftover after parsing attributes in process `syz.8.3102'.
[  621.041388][T18344] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3108'.
[  621.283819][   T40] audit: type=1326 audit(2000000007.339:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18346 comm="syz.7.3109" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000
[  621.290509][   T40] audit: type=1326 audit(2000000007.339:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18346 comm="syz.7.3109" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000
[  621.333641][   T40] audit: type=1326 audit(2000000007.339:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18346 comm="syz.7.3109" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f65579 code=0x7ffc0000
[  621.367024][   T40] audit: type=1326 audit(2000000007.339:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18346 comm="syz.7.3109" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000
[  621.382625][T18308] kexec: Could not allocate control_code_buffer
[  621.385591][   T40] audit: type=1326 audit(2000000007.339:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18346 comm="syz.7.3109" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000
[  621.392324][   T40] audit: type=1326 audit(2000000007.339:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18346 comm="syz.7.3109" exe="/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7f65579 code=0x7ffc0000
[  621.399022][   T40] audit: type=1326 audit(2000000007.339:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18346 comm="syz.7.3109" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000
[  621.406756][   T40] audit: type=1326 audit(2000000007.339:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18346 comm="syz.7.3109" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000
[  622.903007][T18371] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[  622.905156][T18371] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  622.909625][T18371] vhci_hcd vhci_hcd.0: Device attached
[  623.174049][   T29] usb 42-1: SetAddress Request (14) to port 0
[  623.176749][   T29] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd
[  623.300051][T18375] vhci_hcd: connection reset by peer
[  623.304016][   T12] vhci_hcd: stop threads
[  623.307158][   T12] vhci_hcd: release socket
[  623.308739][   T12] vhci_hcd: disconnect device
[  623.537440][   T10] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0
[  623.540473][   T10] hid-generic 0000:0000:0000.0038: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  623.895682][   T10] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0
[  623.899691][   T10] hid-generic 0000:0000:0000.0039: hidraw2: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  624.646058][T18411] block nbd4: shutting down sockets
[  625.461600][T18436] befs: (nbd7): No write support. Marking filesystem read-only
[  625.466577][T18436] block nbd7: Attempted send on invalid socket
[  625.468696][T18436] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  625.471736][T18436] befs: (nbd7): unable to read superblock
[  625.987982][T18449] __nla_validate_parse: 3 callbacks suppressed
[  625.987999][T18449] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3135'.
[  626.151613][T18454] tmpfs: Unknown parameter 'huge`�dvcse'
[  626.420630][T18461] binder: 18460:18461 ioctl c018620c 80000700 returned -1
[  626.525469][T18467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3138'.
[  628.186653][T18499] program syz.8.3149 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  628.243614][   T29] usb 42-1: device descriptor read/8, error -110
[  628.367998][T18501] netem: incorrect gi model size
[  628.370051][T18501] netem: change failed
[  628.556939][T18505] netlink: 'syz.8.3151': attribute type 9 has an invalid length.
[  628.644272][   T29] usb usb42-port1: attempt power cycle
[  628.789355][T18511] lo speed is unknown, defaulting to 1000
[  629.108248][ T6062] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0
[  629.111700][ T6062] hid-generic 0000:0000:0000.003A: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  629.151893][T18528] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3157'.
[  629.155111][T18528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3157'.
[  629.158070][T18528] netlink: 6384 bytes leftover after parsing attributes in process `syz.2.3157'.
[  629.267990][   T29] usb usb42-port1: unable to enumerate USB device
[  630.402013][T18562] netem: incorrect gi model size
[  630.403742][T18562] netem: change failed
[  630.528098][T18561] input: syz1 as /devices/virtual/input/input40
[  630.656570][T18567] block nbd4: shutting down sockets
[  630.865608][T18571] wg2: entered promiscuous mode
[  630.865839][   T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  630.868241][T18571] wg2: entered allmulticast mode
[  630.953776][ T5985] Bluetooth: hci5: command 0x0406 tx timeout
[  631.117628][T18581] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3173'.
[  631.120435][T18581] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3173'.
[  631.123179][T18581] netlink: 6384 bytes leftover after parsing attributes in process `syz.8.3173'.
[  631.618219][T18588] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3174'.
[  632.323704][T18606] lo speed is unknown, defaulting to 1000
[  633.371297][T18618] netem: incorrect gi model size
[  633.373345][T18618] netem: change failed
[  634.756952][T18666] netem: incorrect gi model size
[  634.758568][T18666] netem: change failed
[  634.972447][T18669] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3198'.
[  634.976694][T18669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3198'.
[  634.979869][T18669] netlink: 6384 bytes leftover after parsing attributes in process `syz.2.3198'.
[  635.455657][T18679] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3202'.
[  635.458591][T18679] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3202'.
[  635.461567][T18679] netlink: 6384 bytes leftover after parsing attributes in process `syz.8.3202'.
[  635.687034][T18689] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  635.933897][   T40] audit: type=1326 audit(2000000000.479:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.8.3206" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000
[  635.941214][   T40] audit: type=1326 audit(2000000000.479:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.8.3206" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000
[  635.950104][   T40] audit: type=1326 audit(2000000000.489:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.8.3206" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ee579 code=0x7ffc0000
[  635.956900][   T40] audit: type=1326 audit(2000000000.489:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.8.3206" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000
[  635.965481][   T40] audit: type=1326 audit(2000000000.489:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.8.3206" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000
[  635.972253][   T40] audit: type=1326 audit(2000000000.489:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.8.3206" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ee579 code=0x7ffc0000
[  635.979246][   T40] audit: type=1326 audit(2000000000.489:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.8.3206" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000
[  635.987668][   T40] audit: type=1326 audit(2000000000.489:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.8.3206" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000
[  635.995255][ T1140] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  635.999217][   T40] audit: type=1326 audit(2000000000.489:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.8.3206" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70ee579 code=0x7ffc0000
[  636.008590][   T40] audit: type=1326 audit(2000000000.489:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.8.3206" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000
[  636.464751][T18686] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  636.467020][T18686] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  636.469034][T18686] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  636.477516][T18686] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  636.479468][T18686] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  636.777955][T18709] RDS: rds_bind could not find a transport for fe80::21, load rds_tcp or rds_rdma?
[  637.148018][   T10] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0
[  637.155496][   T10] hid-generic 0000:0000:0000.003B: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  637.201228][T18718] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3214'.
[  637.204156][T18718] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3214'.
[  637.206901][T18718] netlink: 6384 bytes leftover after parsing attributes in process `syz.7.3214'.
[  637.468445][T18731] comedi comedi3: das16m1: I/O port conflict (0x2c6c1,16)
[  637.578283][T18731] infiniband syz0: set down
[  637.579697][T18731] infiniband syz0: added ipvlan1
[  637.595622][T18731] RDS/IB: syz0: added
[  637.596832][T18731] smc: adding ib device syz0 with port count 1
[  637.598510][T18731] smc:    ib device syz0 port 1 has pnetid 
[  637.833639][ T5985] Bluetooth: hci2: command 0x0419 tx timeout
[  638.057405][T18764] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3228'.
[  638.060612][T18764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3228'.
[  638.063236][T18764] netlink: 6384 bytes leftover after parsing attributes in process `syz.4.3228'.
[  638.633747][ T5985] Bluetooth: hci5: command 0x0406 tx timeout
[  638.644436][ T5985] Bluetooth: hci4: command 0x0406 tx timeout
[  638.665466][T18783] blktrace: Concurrent blktraces are not allowed on nbd8
[  638.673613][T10110] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[  638.674222][   T10] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0
[  638.734732][   T10] hid-generic 0000:0000:0000.003C: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  638.893743][T10110] usb 7-1: Using ep0 maxpacket: 8
[  638.909229][T10110] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[  638.912651][T10110] usb 7-1: config 0 has no interface number 0
[  638.915541][T10110] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  638.920044][T10110] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  638.924819][T10110] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  638.929139][T10110] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  638.934426][T10110] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  638.937877][T10110] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  638.942972][T10110] usb 7-1: config 0 descriptor??
[  638.950320][T10110] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  639.150358][T18769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  639.153460][T18769] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  639.155346][ T6062] usb 13-1: new high-speed USB device number 4 using dummy_hcd
[  639.167111][   T10] usb 7-1: USB disconnect, device number 27
[  639.171028][   T10] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[  639.283755][T10110] usb 9-1: new full-speed USB device number 35 using dummy_hcd
[  639.305526][ T6062] usb 13-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  639.310063][ T6062] usb 13-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  639.317680][ T6062] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  639.321332][ T6062] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  639.327896][T18802] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  639.331665][ T6062] usb 13-1: Quirk or no altset; falling back to MIDI 1.0
[  639.437337][T10110] usb 9-1: not running at top speed; connect to a high speed hub
[  639.441434][T10110] usb 9-1: config 1 has an invalid descriptor of length 126, skipping remainder of the config
[  639.447722][T10110] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2
[  639.450462][T10110] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  639.456109][T10110] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  639.458835][T10110] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  639.461545][T10110] usb 9-1: Product: ࠉ
[  639.462864][T10110] usb 9-1: Manufacturer: ꗠ⡐坆┐轻⊶艕ꥎ刲ਖ쩇＠飚⑀ᓥ勍⊐랻駂쵲휱鬐匊쾆㎧疩糪㓹뺑偛對쵹ቸ귽曾≆腖䢗桳鸏잲
[  639.467905][T10110] usb 9-1: SerialNumber: ﳿ
[  639.535510][ T6062] usb 13-1: USB disconnect, device number 4
[  640.082857][T10110] cdc_ncm 9-1:1.0: skipping garbage
[  640.084900][T10110] cdc_ncm 9-1:1.0: CDC Union missing and no IAD found
[  640.087576][T10110] cdc_ncm 9-1:1.0: bind() failure
[  640.101842][T10110] usb 9-1: USB disconnect, device number 35
[  640.715001][ T5981] Bluetooth: hci4: command 0x0406 tx timeout
[  640.717334][ T5981] Bluetooth: hci5: command 0x0406 tx timeout
[  641.023839][T18857] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  641.025870][T18857] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  641.028458][T18857] vhci_hcd vhci_hcd.0: Device attached
[  641.114039][ T1140] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  641.344181][   T29] usb 46-1: SetAddress Request (22) to port 0
[  641.346307][   T29] usb 46-1: new SuperSpeed USB device number 22 using vhci_hcd
[  641.390750][T18876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3257'.
[  641.394433][T18876] sctp: [Deprecated]: syz.2.3257 (pid 18876) Use of int in max_burst socket option deprecated.
[  641.394433][T18876] Use struct sctp_assoc_value instead
[  641.402153][T18879] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3264'.
[  641.575961][T18858] vhci_hcd: connection reset by peer
[  641.586996][T15333] vhci_hcd: stop threads
[  641.588461][T15333] vhci_hcd: release socket
[  641.590802][T15333] vhci_hcd: disconnect device
[  642.344483][T18893] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  642.348354][T18893] ubi: mtd0 is already attached to ubi31
[  642.539975][T18895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3269'.
[  642.661013][T18913] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3277'.
[  642.664778][T18913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3277'.
[  642.668760][T18913] netlink: 6384 bytes leftover after parsing attributes in process `syz.4.3277'.
[  642.759595][T18918] efs: device does not support 512 byte blocks
[  642.761533][T18918] device does not support 512 byte blocks
[  642.761533][T18918] 
[  642.794706][ T5985] Bluetooth: hci5: command 0x0406 tx timeout
[  643.251585][T18920] netem: incorrect gi model size
[  643.253278][T18920] netem: change failed
[  644.431445][T18963] lo speed is unknown, defaulting to 1000
[  644.633191][T18968] netem: incorrect gi model size
[  644.634992][T18968] netem: change failed
[  644.761145][T18972] kvm: pic: single mode not supported
[  644.761158][T18972] kvm: pic: level sensitive irq not supported
[  644.766240][T18972] kvm: pic: non byte read
[  644.770837][T18972] kvm: pic: non byte read
[  644.773501][T18972] kvm: pic: non byte read
[  644.776459][T18972] kvm: pic: non byte read
[  644.779185][T18972] kvm: pic: non byte read
[  644.781617][T18972] kvm: pic: single mode not supported
[  644.781918][T18972] kvm: pic: non byte read
[  644.786776][T18972] kvm: pic: non byte read
[  644.789575][T18972] kvm: pic: non byte read
[  644.792290][T18972] kvm: pic: non byte read
[  646.102147][T19000] 9pnet_fd: Insufficient options for proto=fd
[  646.402863][   T29] usb 46-1: device descriptor read/8, error -110
[  646.814224][   T29] usb usb46-port1: attempt power cycle
[  646.876641][T15317] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  646.881118][   T40] kauditd_printk_skb: 10 callbacks suppressed
[  646.881132][   T40] audit: type=1800 audit(2000000000.899:2393): pid=19010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3302" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  646.902621][T19009] comedi comedi3: comedi_parport: I/O port conflict (0xcf7,3)
[  646.951782][T18998] delete_channel: no stack
[  647.376140][   T29] usb usb46-port1: unable to enumerate USB device
[  647.653457][T19029] netem: incorrect gi model size
[  647.655396][T19029] netem: change failed
[  648.491999][T10110] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0
[  648.495659][T10110] hid-generic 0000:0000:0000.003D: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  648.744499][T19058] netlink: 'syz.8.3317': attribute type 4 has an invalid length.
[  648.748079][T19058] netlink: 'syz.8.3317': attribute type 4 has an invalid length.
[  649.665344][   T10] IPVS: starting estimator thread 0...
[  649.667201][T19077] tmpfs: Bad value for 'mpol'
[  649.763792][T19078] IPVS: using max 44 ests per chain, 105600 per kthread
[  652.577839][T19143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3341'.
[  652.593661][T19143] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3341'.
[  652.644208][T15317] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  652.691761][T19151] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3346'.
[  652.761284][   T40] audit: type=1326 audit(2000000001.589:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19149 comm="syz.2.3345" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000
[  652.768336][   T40] audit: type=1326 audit(2000000001.589:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19149 comm="syz.2.3345" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000
[  652.777632][   T40] audit: type=1326 audit(2000000001.589:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19149 comm="syz.2.3345" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70de579 code=0x7ffc0000
[  652.786364][   T40] audit: type=1326 audit(2000000001.589:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19149 comm="syz.2.3345" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000
[  653.490943][T19181] sctp: [Deprecated]: syz.2.3355 (pid 19181) Use of int in max_burst socket option deprecated.
[  653.490943][T19181] Use struct sctp_assoc_value instead
[  654.096542][T19221] netlink: 'syz.8.3367': attribute type 1 has an invalid length.
[  654.245141][   T29] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0
[  654.251435][   T29] hid-generic 0000:0000:0000.003E: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  655.010883][T19272] netlink: 'syz.4.3382': attribute type 9 has an invalid length.
[  655.013401][T19272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3382'.
[  655.021418][T19272] macvlan2: entered promiscuous mode
[  655.023258][T19272] hsr0: entered promiscuous mode
[  655.025228][T19272] macvlan2: entered allmulticast mode
[  655.026918][T19272] hsr0: entered allmulticast mode
[  655.028574][T19272] hsr_slave_0: entered allmulticast mode
[  655.030357][T19272] hsr_slave_1: entered allmulticast mode
[  656.245628][T19303] netlink: 'syz.4.3392': attribute type 7 has an invalid length.
[  656.365357][T15409] BUG: sleeping function called from invalid context at mm/vmalloc.c:3409
[  656.368085][T15409] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 15409, name: syz-executor
[  656.371685][T15409] preempt_count: 1, expected: 0
[  656.375477][T15409] RCU nest depth: 0, expected: 0
[  656.379609][T15409] no locks held by syz-executor/15409.
[  656.382744][T15409] Preemption disabled at:
[  656.382751][T15409] [<ffffffff8b925f70>] schedule+0xe0/0x3a0
[  656.387235][T15409] CPU: 0 UID: 0 PID: 15409 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  656.387260][T15409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  656.387267][T15409] Call Trace:
[  656.387271][T15409]  <TASK>
[  656.387276][T15409]  dump_stack_lvl+0x16c/0x1f0
[  656.387294][T15409]  __might_resched+0x3c0/0x5e0
[  656.387307][T15409]  ? __pfx___might_resched+0x10/0x10
[  656.387317][T15409]  ? pcpu_block_update+0x562/0x660
[  656.387335][T15409]  ? find_held_lock+0x2b/0x80
[  656.387348][T15409]  vfree+0x75/0xb50
[  656.387365][T15409]  ? rcu_is_watching+0x12/0xc0
[  656.387376][T15409]  ? kfree+0x24f/0x4d0
[  656.387386][T15409]  ? free_percpu+0x6db/0x13c0
[  656.387400][T15409]  futex_hash_free+0x98/0xc0
[  656.387414][T15409]  __mmdrop+0x33f/0x580
[  656.387426][T15409]  ? rcu_is_watching+0x12/0xc0
[  656.387438][T15409]  finish_task_switch.isra.0+0x7a4/0xc10
[  656.387449][T15409]  ? __switch_to+0x7a5/0x11a0
[  656.387464][T15409]  __schedule+0x1198/0x5de0
[  656.387478][T15409]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  656.387501][T15409]  ? __pfx___schedule+0x10/0x10
[  656.387519][T15409]  ? find_held_lock+0x2b/0x80
[  656.387529][T15409]  ? schedule+0x2d7/0x3a0
[  656.387561][T15409]  schedule+0xe7/0x3a0
[  656.387575][T15409]  do_nanosleep+0x21a/0x570
[  656.387590][T15409]  ? __pfx_do_nanosleep+0x10/0x10
[  656.387602][T15409]  ? __asan_memset+0x23/0x50
[  656.387614][T15409]  ? __hrtimer_setup+0x176/0x280
[  656.387632][T15409]  hrtimer_nanosleep+0x155/0x380
[  656.387643][T15409]  ? __pfx_hrtimer_nanosleep+0x10/0x10
[  656.387655][T15409]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  656.387673][T15409]  ? get_old_timespec32+0xda/0x130
[  656.387687][T15409]  ? __pfx_get_old_timespec32+0x10/0x10
[  656.387702][T15409]  common_nsleep+0xa1/0xd0
[  656.387716][T15409]  __ia32_sys_clock_nanosleep_time32+0x33d/0x4f0
[  656.387730][T15409]  ? __pfx___ia32_sys_clock_nanosleep_time32+0x10/0x10
[  656.387742][T15409]  ? rcu_is_watching+0x12/0xc0
[  656.387755][T15409]  __do_fast_syscall_32+0x7c/0x3a0
[  656.387773][T15409]  do_fast_syscall_32+0x32/0x80
[  656.387789][T15409]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  656.387803][T15409] RIP: 0023:0xf7f96579
[  656.387812][T15409] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  656.387823][T15409] RSP: 002b:00000000ff991310 EFLAGS: 00000293 ORIG_RAX: 000000000000010b
[  656.387833][T15409] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000
[  656.387840][T15409] RDX: 00000000ff991344 RSI: 00000000ff99133c RDI: 00000000ff991344
[  656.387847][T15409] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  656.387853][T15409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  656.387859][T15409] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  656.387872][T15409]  </TASK>
[  656.424938][   T40] audit: type=1326 audit(2000000000.229:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19315 comm="syz.7.3396" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f65579 code=0x0
[  658.394020][ T1140] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  664.154176][T15334] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration

VM DIAGNOSIS:
15:11:49  Registers:
info registers vcpu 0

CPU#0
RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=ffffffff85619db0 RDI=ffffffff9b0ff700 RBP=ffffffff9b0ff6c0 RSP=ffffc900065573a0
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000
R12=0000000000000000 R13=0000000000000020 R14=fffffbfff361ff32 R15=dffffc0000000000
RIP=ffffffff85619dd7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff8880974bd000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000002ffe9ff8 CR3=00000000662eb000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000001d547f3 RBX=0000000000000001 RCX=ffffffff8b913bf9 RDX=0000000000000000
RSI=ffffffff8de4eb79 RDI=ffffffff8c163180 RBP=ffffed1003bdb488 RSP=ffffc9000046fdf8
R8 =0000000000000001 R9 =ffffed1005666655 R10=ffff88802b3332ab R11=0000000000000000
R12=0000000000000001 R13=ffff88801deda440 R14=ffffffff90aba190 R15=0000000000000000
RIP=ffffffff8b91275f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880975bd000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000002fffbff8 CR3=0000000054e3d000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a63476098fbe507f 271beef263e887e8
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8813c334004d8f36 ae3e8c7661c06f0d
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff11e5603a57710b 88849501a0bb21a5
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 31637dbc7aea4216 83cd447df99c1b3d
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003840
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b8066a0045598800 00018e8800018e8c
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 15546800d1052000 95292900d67ad400
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 be21d40000018e80 00018e8000018e7f
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00018e8d00018e8d 9bfcfe0000018e7f
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fb2736642d605d39 4f5cbdd8be285bca
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e1ea7323a5d0a600 39d2dcd30099b6f4
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000000 RBX=ffff888060a81880 RCX=ffffffff8197acbc RDX=0000000000000001
RSI=0000000000000004 RDI=ffffc900001e7a40 RBP=1ffff9200003cf44 RSP=ffffc900001e7a18
R8 =0000000000000001 R9 =fffff5200003cf48 R10=0000000000000003 R11=0000000000000000
R12=ffff888060a81888 R13=ffff888060a81890 R14=ffff888060ca4d80 R15=ffff888060a70b10
RIP=ffffffff8197accd RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880976bd000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f36d841f000 CR3=00000000541ef000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000000 RBX=ffff888021432080 RCX=ffffffff8b88e205 RDX=ffff888022d12440
RSI=0000000000000000 RDI=0000000000000005 RBP=ffff8880244a7b80 RSP=ffffc9000457f850
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=dffffc0000000000 R13=0000000000000006 R14=0000000000000001 R15=ffff8880244a7e00
RIP=ffffffff81bb04fb RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880977bd000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f36d841ba10 CR3=00000000776ef000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 637062696c2f3436 62696c2f7273752f
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000570 0000000000060a90
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffffffffffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000